Find Nucleus TCP/IP assets with accessible FTP services
Researchers at Forescout recently published findings on a new set of 13 vulnerabilities with the Nucleus RTOS TCP/IP stack, collectively referred to as NUCLEUS:13. Originally released in 1993, Nucleus is found in many different types of products, including devices in the medical, automation, and OT spaces. Most of the surfaced vulnerabilities in the Nucleus:13 set received CVSS scores in the high range (and one, via the FTP service, has a critical score of 9.8), with successful exploitation yielding information leaks, denial-of-service, or remote code execution.
While Siemens, owner of Nucleus, has released patched firmware, device vendors will still need to utilize these for their affected product lines and push out their own updates. Forescout suggests some mitigation strategies for affected devices, which you can take to help reduce your Nucleus:13 attack footprint while awaiting patches.
_asset.protocol:ftp and protocol:ftp and banner:nucleus
Don’t have Rumble and need help finding your assets potentially vulnerable to NUCLEUS:13? Start your Rumble trial today.
December 3, 2021
Finding HP printers and MFPs vulnerable to Printing Shellz
Do you have HP printers and multi-function printers (MFPs)? You might want to look at the two recently published vulnerabilities that affect 150+ models. Named “Printing Shellz” by the F-Secure security researchers who reported them, these vulns have been around for ~8 …Read More
October 28, 2021
Finding PAX point-of-sale devices
PAX Technologies, a China-based company that manufactures a LOT of point-of-sale (POS) terminal devices, has been in the news this week following an FBI raid of a PAX Florida facility. While the FBI didn’t officially confirm much beyond serving a court-authorized search, a …Read More
October 25, 2021
How to find Cisco devices running IOS XE
Cisco recently disclosed a command execution vulnerability that affects some versions of IOS XE SD-WAN software running on Cisco routing devices and virtual instances. With a CVSSv3 score of 7.8, this vulnerability (assigned CVE-2021-1529) is due to inadequate input …Read More