4 ms·
> like most products connected to the internet, VPNs and firewalls can have vulnerabilities too. Except being exposed without protection to the hostile interne
by redprince 2y ago
> like most products connected to the internet, VPNs and firewalls can have vulnerabilities too.
Except being exposed without protection to the hostile internet is their very reason to exist. I expect such devices to be developed with the awareness that they are going to be attacked by capable adversaries. Thus secure coding practices are to be followed and state of the art exploit mitigation techniques employed on the OS level. There's no excuse for high severity vulnerabilities to be found in these kinds of products.
- katehikes88 2y agoYou ought to adjust your expectations because they don't line up with reality. There is nothing particularly surprising or noteworthy about this vulnerability.
- Wheaties466 2y agotake a look at the history of pwn2own. It could be said that google chrome is one of the most actively developed projects period and people still find crazy 0 interaction exploits for this product. You just need to threat model around that and limit exposure in case something like this happens. Most orgs dont get hit with 0 days. Therefore the best thing you can do is patch often, when possible.