Vulnerability in Siemens Switches allows hackers to gain admin access

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: justify;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s1600/Scalance-X200-critical-security-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9abnMTtOIJVbzNKWZ_5ZpapVvVQEeSc5qPnPCtk2195j_RnAJBWiSGCHBlgkPh9eulRGeRm7d4F5lqdXKzgxylfcdXP4kGT-_fRlN9DHshEF6MGKkm4Nv_gyArA9t1Ua67Fq8RzGJysk/s320/Scalance-X200-critical-security-vulnerability.jpg" width="313" /></a></div><div style="text-align: justify;">A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administrative operations.<br /><br />The vulnerabilities were discovered by Eireann Leverett, Senior security consultant for IOActive and have been reported to Siemens.<br /><br />The first vulnerability(CVE-2013-5944) could allow hackers to perform administrative operation over the network without authentication.<br /><br />Sponsored Links<br />The Second vulnerability (CVE-2013-5709) could allow hackers to hijack web sessions over the network without authentication. This is due to insufficient entropy in its random number generator.<br /><br />Siemens produced a patch within 3 months.  Customers of Siemens are advised to apply the SCALANCE X-200 firmware update.<br /><br />Eireann is scheduled to demonstrate the vulnerabilities and release proof-of-concept code for organizations to check their own devices, at next week's S4 SCADA security conference in Miami.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Monday, January 13, 2014</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in Siemens Switches allows hackers to gain admin access

A Security researcher has discovered two potential vulnerabilities in Siemens Ethernet switches allows a remote attacker to perform administ...

Read more »

Vulnerability in NVIDIA mental ray allows hackers to take control of render farms

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s1600/hacking-render-farm-using-nvidia-vulnerability.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="285" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlwtO6LUijLs7l8HXrTh0_NcJU3bvV9_m5_dOhY0NTlRdVmlNRFwhfRuqviDKF0Qyk4yso-1sp-Dp9Zym2YT9QPeL5dl0_GIekIWwvP5dQQeg8psSNMf45WOp_Eg3GYjovFA-2YtpJ4Zo/s320/hacking-render-farm-using-nvidia-vulnerability.jpg" width="320" /></a></div><div style="text-align: justify;">A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "render farm", says security researchers at ReVuln.<br /><br />A Render farm is a cluster of specialized computers designed for rendering images, typically used for creating visual effects in films.  Render farms have high computational capability.<br /><br />The mental ray is available as stand alone software and also embedded into popular software like AutoCAD, Autodesk 3ds Max, Autodesk Maya, Cinema 4D, Domus3D.<br /><br />By just sending a malicious packet to the target machine, a hacker can load arbitrary DLLs on a victim's machine; Injecting malicious remote library allows attacker to take control of the entire render farm.<br /><br />The mental ray version 3.11.1.10 is only affected by this vulnerability.<br /><br />What will you do when you get access to a system that has huge computation capability? A hacker definitely attempt to use it for password cracking or Bitcoin Mining.<br /><br />You can find the white paper here: <a href="http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf" target="_blank">http://revuln.com/files/ReVuln_Nvidia_mental_ray.pdf</a></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Dated: Thursday, December 12, 2013</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div></div>

Vulnerability in NVIDIA mental ray allows hackers to take control of render farms

A security vulnerability in Nvidia mental ray, a high performance 3D rendering software allows hackers to take control of an entire "re...

Read more »