Version Tomorrow is the first day of the rest of your life

lecture: A look at TR-06FAIL and other CPE Configuration Management Disasters

Event large

In late 2016 a TR-064 (LAN-side CPE management) misconfiguration in a wide range of CPE devices was disclosed that allowed for remote device takeover. Within days, botnets began exploiting a related command injection issue, leading to widespread internet outages for customers of certain ISP's in the UK and abroad.
This talk will explore the impacts of these issues, along with taking a look at some other, related vulnerabilities related to TR-069 (WAN-side CPE management) protocol implementations that could allow for remote takeover of routers en-masse.

#NetworkSecurity #DeviceSecurity

Will be looking at ACS servers, general TR-069 vulnerabilities, the TR-064 issue, and other epic fails :)


Day: 2017-08-06
Start time: 14:30
Duration: 01:00
Room: Re
Track: Curated by SHA2017



Click here to let us know how you liked this event.