Moxa MAR-2000 firmware ping condition allows command injection
A saved monitoring field is reused by a scheduled ping thread for recurring command execution.
Stories per day · 30 days
3 RSS
Relatedcommand-injection1cryptocurrency1hardware-implant1industrial-router1ledger1mar-20001moxa1seed-phrase1supply-chain1trezor1
4 stories, newest first · one card per story
Stories tagged #lte
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger halted Asia and Hong Kong reseller sales after tampered wallets stole seed phrases over LTE.
3
Baicells Nova 430H
CISA says Baicells Nova 430H eNodeB can be crashed by a nearby malformed uplink message.
CrossLink: Breaking Location Privacy by Linking Device Identifiers Across Protocols
Researchers present CrossLink, a passive tracing algorithm linking temporary device identifiers across LTE, WiFi, and BLE, reconstructing full traces for 83% of simulated users.