Finding 0days in Vilo Home Routers
Documents finding nine zero-day vulnerabilities in Vilo consumer home routers through UART interfacing, firmware reversing, and protocol analysis.
Summary
Student IoT Vulnerability Research
A student research team from Brigham Young University conducted a five-month security evaluation of consumer home mesh routers manufactured by Vilo Living.
Hardware Hacking and Firmware Acquisition
Researchers identified circuit board debug headers, connected to the UART interface, analyzed bootloader output, and captured CPU flash read operations to dump the firmware.
Cloud Enumeration and Protocol Reversing
Examining cloud interactions revealed unprotected AWS S3 buckets, MQTT communications, and proprietary TCP protocols used for mobile application management.
Zero Day Discovery and Responsible Disclosure
The investigation uncovered nine zero-day flaws, including stack buffer overflows and unauthenticated command injections, highlighting common vendor disclosure hurdles.
Related talks
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·54 min
Andrew Bellini
Provides a beginner-friendly methodology and budget hardware toolkit guide for disassembling, extracting firmware, and hacking IoT devices.
Creator Stage·19 min
Hyo Jin Lee · Hanryeol Park
Analyzes connected dash cams from global manufacturers, discovering shared OEM vulnerabilities, OS command injections, and custom protocol flaws.