Phong Vu fontvu

Ripple20, set of vulnerabilities inside Treck / KASAGO IP Stacks

Ripple20 is the codename to a set of 19 vulnerabilities discovered by the cybersecurity team JSOF.
These vulnerabilities are inside an IP stack, selled under two different names (Treck TCP/IP for U.S market Kasago TCP/IP, for Asia market. -These two stacks were bought and used under privated-labeled by several softwares companies, some known names are: GHnetv2, Kwiknet, Quadnet.
But there's more, these stacks were also integrated, sometimes with modifications, inside several RTOS (real-time operating system).
Last, some of the vulnerabilities, depending the device operating system, configuration or location can have greater or lower CVSS score.
My advice is for companies to ask their suppliers if they use one of this stack and assess the risk following their company risk policy.
This will not be an easy set of vulnerabilities to patch, sadly.

csrutil disable

	# DON'T USE THIS VERSION!
	# Try https://gist.github.com/wdormann/89ed779933fe205fb52ecf3eacf5ff40 instead

	import os
	import subprocess

	# See: https://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/

	svcinfo = {}
	FNULL = open(os.devnull, 'w')

	#!/bin/bash
	#####################################################
	# Name: Bash CheatSheet for Mac OSX
	#
	# A little overlook of the Bash basics
	#
	# Usage:
	#
	# Author: J. Le Coupanec
	# Date: 2014/11/04