As is obvious, it is not possible for every machine or device connected to the Internet to be 100% secure. Vulnerabilities related to firmware, hardware or connectivity protocol are often causes for hacking devices and are detected on a daily basis. Now, regarding IoT ( Internet of Things ), the appropriate prediction for cybersecurity issues has not yet been made . In 2013, a survey was conducted by the company Independent Security Evaluators (ISE), which revealed 52 vulnerabilities in 13 wireless SOHO routers and NAS devices. Vendors of which are Belkin, TP-Link, Asus and Linksys.
In a follow-up study, ISE reports that popular routers and NAS products have led to more than double the number of security issues and vulnerabilities. These were discovered in 13 IoT devices. In 12 of the 13 devices, ISE was able to exploit the routers and NAS devices and gain remote access. These vulnerabilities included SQL injection issues, XSS spoofing, and cross-site scripting (XSS) errors, among others.
ISE immediately contacted the vendors and informed them of the vulnerabilities. The majority of them accepted the vulnerability reports and three of the vendors immediately worked with ISE to mitigate the security. Unfortunately, there are some that have not even responded to the company about the vulnerability findings.
“The results of the research demonstrate that businesses and homes are still vulnerable to exploits that can cause significant damage. These issues are completely unacceptable in any online application,” said ISE researcher Rick Ramgattie.
As it appears, the security situation of IoT devices has not improved much, even after the effort to update on vulnerabilities and the launch of bug bounty.
New attacks against connected devices are happening almost every week. One such example we saw a few days ago here involves cyberattacks on gas pumps by Dark Web.
