Vulnerability Spotlight: WolfSSL library X.509 Certificate Text Parsing Code Execution Vulnerability
Summary: Cisco Talos disclosed TALOS-2017-0293 / CVE 2017-2800, a code execution vulnerability in the WolfSSL lightweight SSL/TLS library used in ICS and IoT devices. A specially crafted x.509 certificate can trigger a single out-of-bounds overwrite in the code parsing string fields such as commonName, countryName, localityName, stateName, orgName and orgUnit, leading to certificate validation issues, denial of service or remote code execution.
Why it matters: An attacker only needs to supply a malicious certificate to a client or server using WolfSSL, so the library embedded across ICS and IoT devices becomes the entry point - and Talos notes its Snort detection rule 42000 may change as more vulnerability information emerges.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026