Get the latest tech news

A wireless device exploit uncovered 11 years ago still hasn't been fixed by some manufacturers — six vendors and 24 devices found harbouring vulnerable firmware across routers, range extenders, and more


Welcome to Never-patched-land.

NetRise has revealed(PDF) that wireless devices from several manufacturers remain vulnerable to the Pixie Dust exploit disclosed in 2014, even though companies have had over a decade to harden their products against the well-known security flaw. Researchers have also developed several open source tools capable of exploiting Pixie Dust—one of which is highlighted by the security-focused Kali Linux distribution—so manufacturers can't really feign ignorance about the ease with which vulnerable devices can be hacked. "The Pixie Dust exploit is not an isolated case but a symptom of systemic issues in firmware supply chains, from weak cryptography and poor entropy generation to opaque vendor patch practices," NetRise said.

Get the Android app

Or read this on r/technology

Read more on:

Photo of Exploit

Exploit

Photo of years

years

Photo of Routers

Routers

Related news:

News photo

US border patrol collected DNA from thousands of US citizens for years, data shows

News photo

800 Years of English Handwriting

News photo

Huntington’s disease treated successfully for first time in UK gene therapy trial | Surgical procedure to treat devastating illness slowed progress of disease by 75% in patients after three years