2 ms·
If you are not exposing any tcp ports or reaching out directly from those devices to a malicious host, then very unlikely. Either way, it's best to check the v
by LinuxBender 7y ago
If you are not exposing any tcp ports or reaching out directly from those devices to a malicious host, then very unlikely. Either way, it's best to check the vendors site or open a ticket with them, if that is an option.
An alternate option would be to put the device behind another firewall or load balancer or proxy that you know is not vulnerable.
- xyzzy_plugh 7y agoI guess a question I have is then: can I hose you during a TLS handshake? If I can forge DNS, then I can DoS, right? Which makes BGP a prime target right now?
- LinuxBender 7y agoWell, anything that gets a vulnerable device to talk to a malicious device would be an issue. Probably best to check with each vendor and see what their story is if you can't filter the traffic between your devices and potentially malicious devices.
- xyzzy_plugh 7y agoI'm just thinking how an attacker could disrupt e.g. IoT devices. Pretty terrific.