Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzing

Summary: Cisco Talos researchers ported the µC/OS µC/HTTP-server to run natively on Linux by writing a custom Kernel Abstraction Layer and a NetSock-to-POSIX socket shim, then fed it file-based input under AFL++ with AddressSanitizer enabled. The approach uncovered five unique vulnerabilities - TALOS-2023-1725 (CVE-2023-24585), TALOS-2023-1733 (CVE-2023-27882), TALOS-2023-1738 (CVE-2023-28379), TALOS-2023-1746 (CVE-2023-31247) and TALOS-2023-1843 (CVE-2023-45318) - all reported and patched by the manufacturers.
Bottom line: Much of the µC/HTTP-server codebase is shared across multiple products, including the Silicon Labs Gecko Platform and Weston Embedded Cesium NET, so five vulnerabilities in one RTOS component reach devices across several industries that rarely get the same fuzzing scrutiny as desktop software.

Read the original at Cisco Talos ↗

Topics: OT / ICS & Critical Infrastructure
Related: Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026
How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026
Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026