Marcus Hutchins :verified: on Nostr: I found a zero day in a security vendor's firewall software that allows you to ...
I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.
{
"id":"7d3ec59862d15555252db531626675c5922affb879b0eec5820292de4a65fc5b",
"pubkey":"5d0910049da6eacaad9e891d5afb88fa613f4ab514d8a6c4fb51a03edeb60ede",
"created_at":1778178992,
"kind":1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/534/738/287/375/008/original/2eb9415580efecdf.mp4",
"m video/mp4",
"dim 1920x1080",
"blurhash UdB4bK%4RkR%?d$^NHkE_1%GNKj[-nxtV[ay"
],
[
"proxy",
"https://infosec.exchange/users/malwaretech/statuses/116534738472472605",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content":"I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/116/534/738/287/375/008/original/2eb9415580efecdf.mp4",
"sig":"33b9def0b3066f6e54551b355f2faf14c682c3f46837774cd34ddac9e0add28b7bb870b601765dd89cc2426cdac0975dcde80caf1b27dc1fe3192ab80cb30ade"
}