ORing IAP Vulnerabilities: The Unwanted 2024 Feature Parade
The ORing IAP-420 has several vulnerabilities, including command injection and cross-site scripting, that could make your network about as secure as a paper umbrella in a hurricane. With no solution in sight, CyberDanube’s recommendation is to change hardware—because nothing says “security” like a shiny new device!
Hot Take:
It seems like ORing’s IAP-420 has been caught with its digital pants down, leaving it wide open to a buffet of cyber vulnerabilities. Who knew network devices could have midlife crises too?
Key Points:
- ORing IAP-420, version 2.01e, suffers from multiple high-impact vulnerabilities.
- Vulnerabilities include command injection, cross-site scripting, remote command execution via SNMP, and denial of service.
- No fixed version is available; CyberDanube suggests changing hardware.
- Attempts to contact ORing about these issues went unanswered.
- Vulnerabilities were discovered during research at St. Pölten UAS supported by CyberDanube.
Already a member? Log in here