4 ms·
A device running a vulnerable signed 1.1 could still be denied an upgrade to 1.2 by a MITM blocking port 443 even if you used HTTPS.
by 0x0 10y ago
A device running a vulnerable signed 1.1 could still be denied an upgrade to 1.2 by a MITM blocking port 443 even if you used HTTPS.
- peeters 10y agoYeah but it's kind of irrelevant because the device is already vulnerable in your example. The point of this was to say that you can turn a safe device into a vulnerable device as part of a multi-phase attack.