Forest Global Training Partners

Cyber Risks · Cisco Talos

Fuzzing µC/OS protocol stacks, Part 3: TCP/IP server fuzzing, implementing a TAP driver

Summary: Cisco Talos published the final post in a three-part series on fuzzing the µC/OS protocol stacks µC/TCP-IP and µC/HTTP-server, describing how a researcher ported µC/TCP-IP to run natively on Linux using the POSIX KAL implementation, a TAP device named tap0, and a custom Ethernet driver so the stack could process Ethernet frames without emulation or dedicated hardware. The work uncovered two vulnerabilities, TALOS-2023-1828 and TALOS-2023-1829, one of which resulted from fuzzing multiple requests at a time, and Talos noted that much of the µC/TCP-IP codebase is shared across multiple products, with Silicon Labs Gecko Platform also affected by TALOS-2023-1828.

Key Takeaway: Two vulnerabilities found in one RTOS TCP/IP stack reach beyond the product they were found in, because Talos reports much of the µC/TCP-IP codebase is shared across multiple products and Silicon Labs Gecko Platform is affected by TALOS-2023-1828 - so the patched status of one vendor's firmware does not settle the exposure of the others.

Read the original at Cisco Talos ↗

Topics
Malware
Related