3 ms·
The link to the PoC is the same as for this submission: https://news.ycombinator.com/item?id=22251329 https://news.ycombinator.com/item?id=22251329 Same vulner
by yorwba 7y ago
The link to the PoC is the same as for this submission: https://news.ycombinator.com/item?id=22251329 https://news.ycombinator.com/item?id=22251329
Same vulnerability. The reason HiSilicon couldn't provide the fix is that they didn't write the firmware running on those devices, Xiongmai did. This information was added as an update to the original writeup.
- fisherjeff 7y agoMore interesting info on Xiongmai if anyone’s unfamiliar: https://krebsonsecurity.com/2018/10/naming-shaming-web-polluters-xiongmai https://krebsonsecurity.com/2018/10/naming-shaming-web-pollu...