Urgent / 11

The current scare for Urgent/11 is the wide use of VxWorks across many mission-critical operations.  The ability to have RCE without user intervention makes this set of vulnerabilities as dangerous as EternalBlue.  This vulnerability solely exists because of its use of the IPnet stack.  Other RTOS using the IPnet stack is also vulnerable to these exploits and makes the problem more widespread than we first addressed.  As we move into the future, companies should look at switching out legacy products such as IPnet to avoid these vulnerabilities. The current pandemic that we are facing today has made our health care systems ideal for adversaries who want to make a quick buck.  Using shodan, we can still find an abundance of devices running compromised versions of VxWorks RTOS.  A statement put out by Armis researchers said that 97% of vulnerable devices that have been identified have not been patched within the last 18 months [5].  This abundance of devices shows the lack of awareness of this vulnerability to both the consumers and adversaries.  With how long this known vulnerability has existed, it is expected that all these devices should be patched however, we know this is not the case.  This shows that it is only a matter of time until adversaries start using this a means of entry to conduct other malicious actions.