eSecurity Planet

SEPTEMBER 9, 2024

The problem: D-Link’s DAP-2310 Wireless Access Point vulnerability known as “BouncyPufferfish” allows for unauthenticated remote code execution. ” To reduce risks, replace unsupported equipment, apply available firmware updates, and keep an accurate IT asset inventory. or later to fix the vulnerability.

Firmware 109

Firmware Backups Firewall Risk 109

eSecurity Planet

AUGUST 13, 2024

If exploited, the vulnerability would allow a threat actor to execute their own code within the processor’s firmware using System Management Mode (SMM). This can happen even when SMM is locked. The threat actor must get there first before they can exploit this flaw; this could be part of the reason it hasn’t been heavily exploited.

Firmware 109

Firmware Software Wireless Security Defenses 109

eSecurity Planet

AUGUST 13, 2024

If exploited, the vulnerability would allow a threat actor to execute their own code within the processor’s firmware using System Management Mode (SMM). This can happen even when SMM is locked. The threat actor must get there first before they can exploit this flaw; this could be part of the reason it hasn’t been heavily exploited.

Firmware 104

Firmware Software Wireless Security Defenses 104

eSecurity Planet

SEPTEMBER 9, 2024

Industrial networks include wired and wireless technologies such as Ethernet, Modbus, and Profibus. Encryption and secure communication protocols: Protecting data in transit between ICS components. Patch management: Keeping software and firmware up to date to close security gaps.

Firmware 109

Firmware Encryption Manufacturing Risk 109