MicroHard More Like MicroEasy to Exploit
Details command injection and buffer overflow vulnerabilities in Microhard long-range industrial radio hardware used across SCADA networks.
Summary
Microhard Equipment in Critical Infrastructure
Microhard manufactures industrial long-range wireless modems and routers widely deployed across SCADA networks, power utilities, and point-of-sale systems.
Firmware Analysis and Vulnerability Discovery
Security analysis of Microhard radio firmware revealed numerous critical vulnerabilities, including unauthenticated OS command injections and memory corruption buffer overflows.
Vague Vendor Release Notes and Patching Gaps
Reviewing manufacturer security advisories exposes how critical vulnerability fixes were obscured within vague release notes, leaving asset owners unaware of severe exposure.
Lessons in Secure Hardware Development
Remediating industrial radio vulnerabilities requires vendors to implement robust secure development lifecycles, static analysis checks, and transparent vulnerability reporting.
Related talks
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·26 min
Alexandru Lazar
Demonstrates remote code execution vulnerabilities in popular Dahua perimeter surveillance cameras discovered through firmware key extraction.
Creator Stage·25 min
O. Gianatiempo · G. Aznarez
Discloses two unauthenticated remote code execution vulnerabilities in Draytek routers (CVE-2024-51138 and CVE-2024-51139) that enable full edge device takeovers.