Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Shlomi_Feldman
Employee Alumnus
Employee Alumnus

Urgent/11 - 11 Zero Day Vulnerabilities Impacting VxWorks, the Most Widely Used Real-Time Operating

In the last several days, we notice a large campaign advising about discovered vulnerabilities concerning VxWorks operating system. some publications claim that the vulnerabilities effect 200 million devices, while other claim it effect up to 2 billion devices. The danger of these vulnerabilities stand in the fact that this operating system is very common in use in s variety large and completely different sectors. in addition, there is no clear visibility which devices exactly uses this operating system. Even the researcher which found the vulnerabilities https://armis.com/urgent11/#/devices are unable to provide exact and detailed list about the effected devices. this lack of visibility pose real difficulty for the users attempting to mitigate this risks.

I would be more than happy to get your comments and thoughts about the issue

0 Kudos
4 Replies
Tommy_Forrest
Advisor

Any word on when we might see IPS protections for these CVE's?

0 Kudos
Shlomi_Feldman
Employee Alumnus
Employee Alumnus

Hi

I would check it out and will inform you.

0 Kudos
Shlomi_Feldman
Employee Alumnus
Employee Alumnus

thanks for the update, excellent information

The concern of the federal agencies is understood, due to the fact the approx. 2 billion devices are effected by these vulnerabilities globally. The main problem with Urgent/11 is the fact that mos users are not even aware that they own or operate devices using VxWorks operating system. further not all vendors already released patches for the urgent/11 although it was published about 2 month ago.

we will keep on following the issue and will update in Checkmates  

0 Kudos
Upcoming Events

    CheckMates Events