Dubai PR Network, Online Press Release from Dubai and Middle East
 
Business, Banking and Investments(Banking & Investments)
Filter PR by
  

Critical Infrastructure Still at High Risk: Forescout Research Spotlights 21 New Vulnerabilities

 

Impact includes popular routers, open-source components used to connect critical local networks in energy, healthcare, transportation, and emergency services

Forescout, a global cybersecurity leader, today released “SIERRA:21 – Living on the Edge,” an analysis of 21 newly discovered vulnerabilities within OT/IoT routers and open-source software components. The report — produced by Forescout Research – Vedere Labs, a leading global team dedicated to uncovering vulnerabilities in critical infrastructure — emphasizes the continued risk to critical infrastructure and sheds light on possible mitigations.


“SIERRA:21 – Living on the Edge” features research into Sierra Wireless AirLink cellular routers and some of its open-source components, such as TinyXML and OpenNDS. Sierra Wireless routers are popular — an open database of Wi-Fi networks shows 245,000 networks worldwide running Sierra Wireless for a variety of applications. For example, Sierra Wireless routers are used for police vehicles connecting to a central network management system or to stream surveillance video, in manufacturing plants for industrial asset monitoring, in healthcare facilities providing temporary connectivity and to manage electric vehicle charging stations. The 21 new vulnerabilities have the potential to stop vital communications that could impact everyday life.


Forescout Research further finds:
• The attack surface is expansive with 86,000 vulnerable routers still exposed online. Less than 10% of these routers are confirmed to be patched against known previous vulnerabilities found since 2019.
• Regions with the highest number of exposed devices includes:
o 68,605 devices in The United States
o 5,580 devices in Canada
o 3,853 devices in Australia
o 2,329 devices in France
o 1,001 devices in Thailand
• Among the 21 vulnerabilities, one has critical severity (CVSS score 9.6), nine have high severity and 11 have medium severity. These vulnerabilities allow attackers to steal credentials, take control of a router by injecting malicious code, persist on the device and use it as an initial access point into critical networks.
• Patching can’t fix everything. 90 percent of devices exposing a specific management interface have reached end of life, meaning they cannot be further patched.
● It’s an uphill battle to secure supply chain components. Open-source software elements continue to go unchecked and increase the attack surface of critical devices, leading to vulnerabilities that may be hard for organizations to track and mitigate.


“We are raising the alarm today because there remain thousands of OT/IoT devices representing an increased attack surface that requires attention,” advises Elisa Constante, VP of Research, Forescout Research – Vedere Labs. “Vulnerabilities impacting critical infrastructure are like an open window for bad actors in every community. State-sponsored actors are developing custom malware to use routers for persistence and espionage. Cybercriminals are also leveraging routers and related infrastructure for residential proxies and to recruit into botnets. Our discoveries reaffirm the need for heightened awareness of the OT/IoT edge devices that are so often neglected.”


Sierra Wireless and OpenDNS have issued patches for the identified vulnerabilities. TinyXML is an abandoned open source project, so the upstream vulnerabilities will not be fixed and must be addressed downstream.


Posted by : DubaiPRNetwork.com Editorial Team
Viewed 7154 times
PR Category : Banking & Investments
Posted on : Thursday, December 7, 2023  11:57:00 AM UAE local time (GMT+4)
Replication or redistribution in whole or in part is expressly prohibited without the prior written consent of DubaiPRNetwork.com.
Previous Story : ADAFZ Sign Musataha Agreement with Grand Move to Develop AED...
Next Story : Schneider Electric announces Google, ASM and HP have Joined ...
Email this article Print this article

Share this article with your friends and followers
NewsVine
Back to Section Home

Related Stories



 
 
Most Viewed Press Release posted in the last 7 days
STATEMENT BY PRINCIPALS OF THE INTER-AGENCY STANDING COMMITTEE - CIVILIANS IN GAZA IN EXTR... [32242-Views]
IATA and The Weather Company Collaborate to Provide Enhanced Turbulence-Related Weather Da... [31816-Views]
2023 Safest Year for Flying By Several Parameters [13468-Views]
CARTIER ISLAMIC INSPIRATION AND MODERN DESIGN EXHIBITION AT LOUVRE ABU DHABI [8466-Views]
e& reports record consolidated net profit of AED 10.3 billion growing 3% year-over-year [7687-Views]
Presenting the new Bremont Bamford Aurora Limited Edition [7277-Views]
The Constellation Meteorite: No Two Dials the Same [6904-Views]
Mr. Arjun Dhanak of Kanz Jewels Clinches Youngest MD Award at The Retail Jeweller Dubai Fo... [6822-Views]
Xiaomi 14 Ultra Makes a Big Entrance in the UAE for the First Time [6740-Views]
Luxury Perfumery Pioneer Navitus Parfums Launches in Dubai [6724-Views]
Monty Capital Achieves Key Regulatory Milestone With The Acquisition Of DFSA Category 4 Li... [6638-Views]
Dubai Customs Raises Awareness among 5150 Cruise Ship Passengers about Its Measures to Com... [5904-Views]
DHA launches ‘Assessment of Critical Care and Emergency Transfer Services' Project with He... [5719-Views]
Hotpack Global to roll out RECAPP recycling bins to collect 40 tons of waste a year [5715-Views]
Hakoora Invites Diners to Savour a Tempting Iftar Experience this Ramadan [5568-Views]
Recognising Team Effort: Dubai Airports launches OneDXB Chairman Award to celebrate delive... [5560-Views]
Union Coop engages Network International as its exclusive digital payments service provide... [5285-Views]
SANTONI SETS THE TONE FOR THE NEXT FALL/WINTER SEASON DURING MILAN FASHION WEEK [5059-Views]
Global Village unveils Mini World's latest attraction, the all-new outdoor Neon Galaxy X –... [5051-Views]
ELEVATE YOUR HOME ENTERTAINMENT EXPERIENCE WITH LG SOUNDBAR SC9S [4990-Views]
Day two of busy Gulfood puts Dubai at the heart of global F&B [4842-Views]
UAE's Newest Home-Grown Fragrance Brand –FARIDAH– Unveiled, Complements The $12.4 bn Perfu... [4801-Views]
Hitachi Energy invests over 30 million euros to expand transformer operations in Germany [4793-Views]
Al Shindagha Historic Neighbourhood Springs to Life with Hag Al Leila Festivities [4748-Views]
Star-studded culinary showcase and mega-deals continue on day four of Gulfood [4649-Views]
 
RSS Facebook Twitter LinkedDin DubaiPRNetwork.com on Instagram
 
Top Sections
 
Top Stories