{"id":63732,"date":"2024-01-04T15:45:00","date_gmt":"2024-01-04T15:45:00","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/?p=63732"},"modified":"2024-01-04T15:45:02","modified_gmt":"2024-01-04T15:45:02","slug":"forescout-technologies-reveals-critical-infrastructure-still-at-high-risk-forescout-research-spotlights-21-new-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2024\/01\/04\/forescout-technologies-reveals-critical-infrastructure-still-at-high-risk-forescout-research-spotlights-21-new-vulnerabilities\/","title":{"rendered":"Forescout Technologies reveals: critical infrastructure still at high risk: Forescout Research spotlights 21 new vulnerabilities"},"content":{"rendered":"\n

Impact includes popular routers, open-source components used to connect critical local networks in energy, healthcare, transportation and emergency services<\/em><\/strong>.<\/p>\n\n\n

\n
\"\"
Yaadhna Singh Gounden, Obscure Technologies\u00a0Head of Development for the African region.<\/figcaption><\/figure><\/div>\n\n\n

Obscure Technologies \u2013 the sole distributor of Forescout Technologies –\u00a0 a global cybersecurity leader \u2013 has announced that Forescout has released ‘SIERRA:21 \u2013 Living on the Edge’, an analysis of 21 newly discovered vulnerabilities within OT\/IoT routers and open-source software components. <\/p>\n\n\n\n

The report \u2014 produced by Forescout Research \u2013 Vedere Labs, a leading global team dedicated to uncovering vulnerabilities in critical infrastructure \u2014 emphasises the continued risk to critical infrastructure and sheds light on possible mitigations.<\/p>\n\n\n\n

\u201cSIERRA:21 \u2013 Living on the Edge\u201d features research into Sierra Wireless AirLink cellular routers and some of its open-source components, such as TinyXML and OpenNDS. Sierra Wireless routers are popular \u2014 an open database of Wi-Fi networks shows 245,000 networks worldwide running Sierra Wireless for a variety of applications. For example, Sierra Wireless routers are used for police vehicles connecting to a central network management system or to stream surveillance video, in manufacturing plants for industrial asset monitoring, in healthcare facilities providing temporary connectivity and to manage electric vehicle charging stations. The 21 new vulnerabilities have the potential to stop vital communications that could impact everyday life.<\/p>\n\n\n\n

Forescout Research further finds:<\/strong><\/p>\n\n\n\n

The attack surface is expansive with 86,000 vulnerable routers still exposed online. Less than 10% of these routers are confirmed to be patched against known previous vulnerabilities found since 2019.<\/p>\n\n\n\n

Regions with the highest number of exposed devices includes:<\/p>\n\n\n\n

    \n
  • 68,605 devices in The United States<\/li>\n<\/ul>\n\n\n\n
      \n
    • 5,580 devices in Canada<\/li>\n<\/ul>\n\n\n\n
        \n
      • 3,853 devices in Australia<\/li>\n<\/ul>\n\n\n\n
          \n
        • 2,329 devices in France<\/li>\n<\/ul>\n\n\n\n
            \n
          • 1,001 devices in Thailand<\/li>\n<\/ul>\n\n\n\n

            Among the 21 vulnerabilities, one has critical severity (CVSS score 9.6), nine have high severity and 11 have medium severity. These vulnerabilities allow attackers to steal credentials, take control of a router by injecting malicious code, persist on the device and use it as an initial access point into critical networks.<\/p>\n\n\n\n

            Patching can\u2019t fix everything. 90 percent of devices exposing a specific management interface have reached end of life, meaning they cannot be further patched.<\/p>\n\n\n\n

            It\u2019s an uphill battle to secure supply chain components. Open-source software elements continue to go unchecked and increase the attack surface of critical devices, leading to vulnerabilities that may be hard for organisations to track and mitigate.<\/p>\n\n\n\n

            \u201cWe are raising the alarm because there remain thousands of OT\/IoT devices representing an increased attack surface that requires attention,\u201d said Elisa Constante, VP of Research, Forescout Research \u2013 Vedere Labs. \u201cVulnerabilities impacting critical infrastructure are like an open window for bad actors in every community. State-sponsored actors are developing custom malware to use routers for persistence and espionage. Cybercriminals are also leveraging routers and related infrastructure for residential proxies and to recruit into botnets. Our discoveries reaffirm the need for heightened awareness of the OT\/IoT edge devices that are so often neglected.\u201d<\/p>\n\n\n\n

            Sierra Wireless and OpenDNS have issued patches for the identified vulnerabilities. TinyXML is an abandoned open source project, so the upstream vulnerabilities will not be fixed and must be addressed downstream.<\/p>\n","protected":false},"excerpt":{"rendered":"

            Impact includes popular routers, open-source components used to connect critical local networks in energy, healthcare, transportation and emergency services. Obscure Technologies \u2013 the sole distributor of Forescout Technologies –\u00a0 a global cybersecurity leader \u2013 has announced that Forescout has released ‘SIERRA:21 \u2013 Living on the Edge’, an analysis of 21 newly discovered vulnerabilities within OT\/IoT […]<\/p>\n","protected":false},"author":62,"featured_media":63735,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[15417,38,54,183,13],"tags":[12871,16671,16669,16670,123,16672,16673],"class_list":["post-63732","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-networking","category-research","category-software","category-top-stories","tag-critical-infrastructure","tag-forescout-research","tag-forescout-technologies","tag-high-risk","tag-networks","tag-new-vulnerabilities","tag-sierra21"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/63732","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/62"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=63732"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/63732\/revisions"}],"predecessor-version":[{"id":63736,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/63732\/revisions\/63736"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/63735"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=63732"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=63732"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=63732"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}