Unmasking DNSpooq: Automatically Detecting DNSpooq Prerequisites

We look back at and review some of the major vulnerabilities and attacks targeting embedded devices in 2020, hoping to avoid similar security issues in 2021.

As part of supply chain security assessment, Vdoo has discovered several new vulnerabilities in Realtek’s RTL8195A Wi-Fi module, used in a range of industries including security, healthcare and industrial. Now that these vulnerabilities have been responsibly disclosed and patches have been pushed to the customers, we wanted to provide a technical description of the issues, and how they can be detected and mitigated.

Vdoo’s security research team discovered a potentially critical vulnerability in RAUC, an open-source framework for firmware updates. Vdoo has responsibly disclosed this vulnerability and worked closely with the vendor verifying the fix to the vulnerability. All the technical details about this security issue and it’s impact can be found in the blog post.