Cyber security technical information

Month: July 2021

  • Stay alert to Trend Micro products – 30th Jul 2021

    Preface: In order to expand business development, software products sometimes use similar engineering designs. When vulnerabilities occur, their effects seem to be interrelated. Privilege Escalation Attack Techniques: A low-privileged process from being escalated via a token stolen from a process with greater privileges. This technique is often used in tandem with another vulnerability to successfully…

  • CISA security advisory: KUKA KR C4 Controller (27th Jul 2021)

    Preface: The computer behind the robots performance is the Programmable Logic Controllers (PLCs). PLCS are able to control the robots and help them do their job at very specific times and points in the production process. Product background: The KR C4 software architeture integrates Robot Control, PLC Control, Motion Control (e.g. KUKA.CNC) and Safety Control.…

  • CVE-2021-34432 Do not kill mosquitto (27th July, 2021)

    Preface: Internet of Things (IoT) and machine-to-machine (M2M) technologies need to use a messaging and connectivity protocol in order to exchange information from a remote location. Background: MQTT is a binary-based protocol and has command and command acknowledgement format. So every time a client sends a command to the broker, the broker sends an acknowledgement.…

  • Elasticsearch ECE 7.13.3 Database Disclosure (27th Jul 2021)

    Preface: 3431 companies reportedly use Elasticsearch in their tech stacks, including Uber, Shopify, and Udemy. Background: Elasticsearch is based on Lucene, very fast and scalable for searching operations. Elasticsearch is good for data analysis, logging and error monitoring and alerting so can be used to search all kinds of documents.Remark: Apache Lucene is a free…

  • Vulnerability found by Apple on Feb, 2021. However such vulnerability awaken digital world consider whether to continue using LibTIFF. (26th July, 2021)

    Preface: Multiple vulnerabilities have been found in libTIFF, the worst of which may allow execution of arbitrary code. It is talking about 5 years ago (2016)! Has it become the focus of manufacturers’ attention now? Background: TIFF offers support for tag extensions allowing for more tags than the standard TIFF specification. For example: Code, 326…

  • Stay alert! IPython code execution (23-7-2021)

    Preface: IPython offers an enhanced read-eval-print loop (REPL) environment particularly well adapted to scientific computing. In other words, IPython is a powerful interface to the Python language. Background: IPython provides a rich toolkit to help you make the most out of using Python, with: Powerful Python shells (terminal and Qt-based). A web-based notebook with the…

  • 32-bit design limitation (0x7ffffffff). Another episode of Y2K. (23-07-2021)

    Preface: Because humans have destroyed the environment. Therefore, natural disasters resemble God’s punishment. In the digital world, the situation is the same. The reason for the penalty is the design weakness of the software. Background: Perhaps the younger generation has not experienced “Y2K” technical problems because they are still children. The millennium bug is about…

  • Design flaws sometimes involve risks, but sometimes they are unknown (CVE-2021-33909)

    Preface: A series of sequential read functions for seq operations are defined in fs/seq_file.c. These functions were first introduced in 2001, but have not been used much in the kernel before, and after the 2.6 kernel, many / The seq function is heavily used in proc’s read-only files. Synopsis: Linux kernel 5.13 initially supports Apple’s…

  • A flaw that awakens security vendors – free after use vulnerability (CVE-2021-32589) – 20th July, 2021.

    Preface: If you have fgfmsd (TCP/541 / TCP/542) public-facing and have not upgraded to a fixed release, perhaps you should consider the workaround by vendor. Background: The FGFM protocol runs over SSL (Secure Sockets Layer) using TCP port 541 under IPv4. Both FortiGate and FortiManager units have a ‘FGFM’ daemon running exclusively for FortiGate to…

  • Closer look of VMware Thinapp design weakness (CVE-2021-22000) – 18th July 2021

    Preface: Secure loading of libraries to prevent DLL preloading attacks, said Microsoft. Background: When an application dynamically loads a dynamic link library (DLL) without specifying a fully qualified path, Windows tries to locate the DLL by searching a well-defined set of directories. If an attacker gains control of one of the directories, they can force…