Urgent/11 - 11 Zero Day Vulnerabilities Impacting VxWorks, the Most Widely Used Real-Time Operating

[Shlomi_Feldman]

In the last several days, we notice a large campaign advising about discovered vulnerabilities concerning VxWorks operating system. some publications claim that the vulnerabilities effect 200 million devices, while other claim it effect up to 2 billion devices. The danger of these vulnerabilities stand in the fact that this operating system is very common in use in s variety large and completely different sectors. in addition, there is no clear visibility which devices exactly uses this operating system. Even the researcher which found the vulnerabilities https://armis.com/urgent11/#/devices are unable to provide exact and detailed list about the effected devices. this lack of visibility pose real difficulty for the users attempting to mitigate this risks.

I would be more than happy to get your comments and thoughts about the issue

[Tommy_Forrest]

Any word on when we might see IPS protections for these CVE's?

[Shlomi_Feldman]

Hi

I would check it out and will inform you.

[Dale_Lobb]

FDA and DHS/CISA alerts on Urgent/11:

https://www.fda.gov/medical-devices/safety-communications/urgent11-cybersecurity-vulnerabilities-wid...

https://www.us-cert.gov/ics/advisories/icsa-19-211-01

https://www.us-cert.gov/ics/advisories/icsma-19-274-01

https://www.us-cert.gov/ics/advisories/icsa-19-274-01

[Shlomi_Feldman]

thanks for the update, excellent information

The concern of the federal agencies is understood, due to the fact the approx. 2 billion devices are effected by these vulnerabilities globally. The main problem with Urgent/11 is the fact that mos users are not even aware that they own or operate devices using VxWorks operating system. further not all vendors already released patches for the urgent/11 although it was published about 2 month ago.

we will keep on following the issue and will update in Checkmates