Pages

Friday, October 2, 2015

Positive Technologies Experts Detect Critical Vulnerability in Huawei LTE Modems

Huawei thanked the Positive Technologies experts Timur Yunusov and Kirill Nesterov and the information security specialist Alexey Osipov, who detected a harmful vulnerability in Huawei 4G USB modems (E3272s) and helped to fix it.


Upon the research, the Chinese telecommunications equipment company issued a software update for the device.

According to the Huawei PSIRT bulletin, a potential intruder can block the device by sending a malicious packet. The Positive Technologies researchers claim that the vulnerability may lead to a DOS attack and remote arbitrary code execution via an XSS attack or stack overflow.

In late 2014, Positive Technologies specialists carried out a large-scale research on vulnerabilities in 4G USB modems, which included investigation of six different series of devices (including Huawei E3272s) with 30 various types of firmware.

By exploiting detected flaws, an intruder can gain rights on a remote modem, take control over the computer connected to the vulnerable modem, and obtain access to the subscriber's account in the mobile operator's portal. Moreover, attacks on SIM cards via binary SMS messages allow an attacker to intercept and decrypt a subscriber's traffic, track his or her location, and block the SIM card. Timur Yunusov covered attacks on 4G network equipment in his speech at PHDays V in May 2015. You can watch his presentation Bootkit via SMS: 4G Access Level Security Assessment on Positive Technologies' page on YouTube.

This is not the first research on the safety of telecommunications equipment and mobile network conducted by Positive Technologies experts. In January 2015, Evgeny Stroev issued a report on severe SNMP vulnerabilities in network equipment produced by Huawei and H3C. Those vulnerabilities allowed penetrating a corporate network of any company, including a technological network of a mobile carrier.

A research, carried out by Dmitry Kurbatov, Sergey Puzankov, and Pavel Novikov in February 2015, revealed that a good few of 2G and 3G mobile networks can be accessed via the internet because of open GTP ports and other open data transfer protocols (FTP, Telnet, HTTP). An attacker can connect to the node of a mobile network operator by exploiting vulnerabilities (for example, default passwords) in these interfaces.

53 comments:


  1. Today i am obliged to convey this message of greatness to only those who will seize the opportunity life will offer to become somebody great and actualize their dreams. I stumbled to a blog and saw comments of how to obtain the blank atm card prior to my knowledge of it.I was once an accountant at a firm but since i got the blank atm card from raymondleo05@gmail.com my whole world changed and now i have been able to become all i ever dreamed of.I have no risk of usage and am able to withdraw up to $6000 monthly. Its really great to feel rich and alive once more. Hesitate no further but contact raymondleo05@gmail.com and make your purchase.

    ReplyDelete
    Replies
    1. How I Was Rescued By A God Fearing And Trusted Lender {Lexieloancompany@yahoo.com}..

      Hello, I am Andrew Thompson currently living in CT USA, God has bless me with two kids and a lovely Wife, I promise to share this Testimony because of God favor in my life, 2days ago I was in desperate need of money so I thought of having a loan then I ran into wrong hands who claimed to be loan lender not knowing he was a scam. he collected 1,500.00 USD from me and refuse to email me since then I was confuse, but God came to my rescue, one faithful day I went to church after the service I share idea with a friend and she introduce me to LEXIE LOAN COMPANY, she said she was given 98,000.00 USD by MR LEXIE , THE MANAGING DIRECTOR OF LEXIE LOAN COMPANY. So I collected his email Address , he told me the rules and regulation and I followed, then after processing of the Documents, he gave me my loan of 55,000.00 USD... well if you are interested in a loan you can as well contact him on this Email: Lexieloancompany@yahoo.com or call/sms on: +18168926958 thanks, I am sure he will also help you. Website: http://lexieloans.bravesites.com


      Delete
  2. Thank goodness I found that on Bing. You’ve created my day! Thank you yet again. amazon gift card generator

    ReplyDelete
  3. This is example of how research can help to make things better. Here we have people from different countries that are collaborating in order to fix an issue and Huawei is interested side. I recently read bestdissertation testimonials and found it pretty good for me. Who knows maybe someone else needs them too.

    ReplyDelete
  4. Extraordinary data. Extremely progressed inquires about are going on the planet. We know such data through this website. Truly much obliged. I got a decent resume from professional resume writing service and landed great position.

    ReplyDelete
  5. I enjoyed over read your blog post. Your blog have nice information, I got good ideas from this amazing blog. I am always searching like this type blog post. I hope I will see again..
    animal jam| cool games| cool math games| 8 ball pool| sudoku| yoob| stickman games| unblocked games | shooting games| friv4school|
    happy wheels| fighting games

    ReplyDelete
  6. HOW I GOT MY LOAN FROM THIS GREAT COMPANY

    Hello my dear people , I am Anita Frank, currently living in New jersey city, USA. I am a widow at the moment with three kids and i was stuck in a financial situation and i needed to refinance and pay my bills. I tried seeking loans from various loan firms both private and corporate but never with success, and most banks declined my credit ,do not full prey to those hoodlums at there that call them self money lender they are all scam , all they want is your money and you well not hear from them again they have done it to me twice before I met Mr. Wilson Edwards the most interesting part of it is that my loan was transfer to me within 74hours so I will advice you to contact Mr. Edwards if you are interested in getting loan and you are sure you can pay him back on time you can contact him via email……… (wilsonedwardsloancompany@gmail.com) No credit check, no co signer with just 2% interest rate and better repayment plans and schedule if you must contact any firm with reference to securing a loan without collateral then contact Mr. Wilson Edwards today for your loan
    They offer all kind of categories of loan they
    Short term loan (5_10years)
    Long term loan (20_40)
    Media term loan(10_20)
    They offer loan like
    Home loan............., Business loan........ Debt loan .......
    Student loan..........,Business start up loan
    Business loan....... , Company loan.............. etc
    Email..........(wilsonedwardsloancompany@gmail.com )
    When it comes to financial crisis and loan then Wilson Edwards loan financial is the place to go please just tell him I Mrs. Anita Frank direct you Good Luck.......................

    ReplyDelete
  7. This is quite interesting, You’re an extremely skilled blogger.
    I have joined your feed and look forward to reading more of your
    excellent post. Also, I have shared your website in my social networks!
    windows store gift card generator no survey | eshop gift card generator| amazon gift card generator no survey|itunes gift card generator 2016

    ReplyDelete
  8. Best Place To Get Your Financial Problem Solved (Lexieloanfinance@gmail.com)

    My Name is Nicole Marie, I live in USA and life is worth living comfortably for me and my family now and i really have never seen goodness shown to me this much in my life, As i am a struggling mum with two kids and i have been going through a serious problem as my husband encountered a terrible accident last two weeks, and the doctors states that he needs to undergo a delicate surgery for him to be able to walk again and i could not afford the bill for his surgery then i went to the bank for a loan and they turn me down stating that i have no credit card, from there i ran to my father and he was not able to help me, then when i was browsing through yahoo answers and i came across a God fearing man (Mr Martinez Lexie) who provides loans at an affordable interest rate and i have been hearing about so many scams on the Internet mostly Africa, but at this my desperate situation, i had no choice than to give it an attempt due to the fact that the company is from United State of America, and surprisingly it was all like a dream, i received a loan of $82,000.00 USD and i payed for my husband surgery and thank GOD today he is ok and can walk, my family is happy and i said to myself that i will shout to the world the wonders this great and God fearing Man Mr Martinez Lexie did for me and my family; so if anyone is in genuine and serious need of a loan do contact this GOD fearing man via Email: ( Lexieloanfinance@gmail.com ) or reach him through this number +1 (406) 946-0675 thanks

    ReplyDelete
  9. Thank you for posting the great content. I was looking for something like this. I found it quiet interesting, hopefully you will keep posting such blogs. Do visit custom essay writing service.

    ReplyDelete
  10. I can set up my new idea from this post. It gives in depth information. Thanks for this valuable information for all,..Refer book review writing service

    ReplyDelete
  11. I would like to give thanks too Positive Technologies experts Timur Yunusov and Kirill Nesterov and the information security specialist Alexey Osipov. Yopu [people done a great works and it changes the USB modems technologies more. best essay writing services

    ReplyDelete
  12. It is good that it was detected early enough. My mobile operator's portal has very confidential and highly important information. Paraphrase My Thesis. If an intruder has access to my account, then I'd lose a lot. Thanks a lot to the Positive Technologies experts Timur Yunusov and Kirill Nesterov.

    ReplyDelete
  13. اتصلوا بنا تجدونا اينما كنتم وفى كل وقت وكل مكان
    نتعامل معكم بافضل جوده واحسن اداء واقل الاسعار
    مع شركة اركان المملكه انتو تتعاملون مع افضل شركة بالمملكه ككل
    لاننا شركة زات باع كبير فى عالم التنظيف على مر السنين ونعمل باقصى جهد من اجل راحتكم اولااا
    :::::::::::::::::::::::::::::::::::::
    شركة كشف تسربات المياه بجازان




    شركة كشف تسربات المياه بخميس مشيط



    شركة كشف تسربات المياه بابها



    شركة كشف تسربات المياه بالدمام



    شركة كشف تسربات المياه بالرياض

    شركة نقل اثاث بجازان



    تسليك مجارى بالدمام




    شركة تسليك مجارى بجازان




    شركة تسليك مجارى بابها

    شركة نقل عفش بالرياض


    شركة نقل عفش بخميس مشيط

    ReplyDelete
  14. como man i will help u and solve ur all problems regarding bank transfers..n show u some proofs then make a deal with us.. I do western union..minimum 1000$ n maximum 10,000$ (50-50)...any uk bank transfer..ship to any country safe and secure...jst contact me tesladavid0@gmail.com

    ReplyDelete
  15. I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well. . Assignment Help

    ReplyDelete

  16. Truly, this article is really one of the very best in the history of articles. I am a antique ’Article’ collector and I sometimes read some new articles if I find them interesting.
    Assignment Help

    ReplyDelete
  17. I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well. . eyeglasses online

    ReplyDelete
  18. Pleasant article. Think so new type of elements have incorporated into your article. Sitting tight for your next article.
    Case Studies Analysis

    ReplyDelete
  19. Your article is completely outstanding. I got some good info about technology from this site. You can go through Dissertation writing service UK to get brilliant ideas in writing.

    ReplyDelete
  20. gmail tips

    Gmail is one of the most popular free email services currently provided by Google. Gmail support number of language interface and you can easily switch to display language of your choice. You can change display language of Gmail email account from your Gmail account settings.
    gmail sign in

    about gmail

    ReplyDelete
  21. We are glad to hear that the harmful vulnerability of Huawei 4G USB modems (E3272s) has been fixed. We appreciate the fact that you always keep us updated about what is going on in the world of technology. Are you aware that you can professional article review services by simply clicking on the link below:
    Genuine Article Review & Proofreading Help

    ReplyDelete
  22. Human Resource Cases Solution and Analysis, Human Resource Cases Solutions, Custom solved according to your need.
    Human Resource Case Studies Analysis

    ReplyDelete
  23. لا داعى للقلق وانت تتعامل مع شركة اركان المملكه للتنظيف والمكافحه والتسليك
    وغير ذالك من كافه انواع التنظيف فى المملكه السعوديه باكملها اذا
    كل ما عليكم هو زياره صفحتنا للتطلع على اقل الاسعار المتاحه
    والتى تفى احتياجاتكم الخاصه
    0544369605

    شركة كشف تسربات المياه بالدمام

    تسليك مجارى بالدمام

    شركة تنظيف بالدمام

    شركة تنظيف شقق بالدمام

    شركة مكافحة حشرات بالدمام

    اتصلوا بنا دائما تجدونا فى كل وقت وكل مكان
    لاننا نتعامل بمنتهى الدقه والفعاله والاهميه الكبيره مع شركة
    اركان المملكه لاداعى للقلق نحن معك دائما

    ReplyDelete
  24. History Assignments Writing Service
    Thank you for your commissions over the years to keep us updated on very important matters. It is indeed a profitable creation having your blog. It is engaging to transport one’s self into the quality of life; to see how a crafty person has thought before us, and to what noble crown we have at last.

    ReplyDelete
  25. All the best blogs that is very useful for keeping me share the ideas
    of the future as well this is really what I was looking for, and I am
    very happy to come here. Thank you very much
    earn to die play
    earn to die
    earn to die 3
    Hi! I’ve been reading your blog for a while now and finally got the
    earn to die 4
    courage to go ahead and give youu a shout out from
    earn to die 6
    Austin Texas! Just wanted to tell
    earn to die 5
    you keep up the fantastic work!my weblog
    age of war
    Hi! I’ve been reading your blog for a while now and finally got the
    happy wheels
    strike force heroes
    slither io
    slitherio
    good game empire

    ReplyDelete



  26. $READ MY STORY ON HOW I BECAME DEBT FREE WITH TIPS OF DETECTING A LOAN SCAM ON-LINE !!$$$$$

    Attention To The World,

    If you need a genuine and reliable loan help,and don’t want to be a scam victim,I think this is for you.This is a testimony on how,I was ripped off by some idiot that calls themselves lenders,and how I finally got my financial freedom through a God sent helper that finally gave my life a meaning,with the least cheapest rates as to 2% interest and little TOKEN other requirements and they don’t give a damn to your credit score… For more info on how to reach this great man just email him now and tell him that Mark Shores testify about him on the internet his email address is: slivinumarko@yahoo.com ... CONTACT THIS GREAT LOAN LENDER TODAY VIA THIS EMAIL ADDRESS:slivinumarko@yahoo.com and my everyday prayer to this great man is that GOD WILL NEVER STOP BLESSING AND PROTECTING HIS FAMILY because he put an endless smile on my faces and am 100% DEBT FREE TODAY.......

    ReplyDelete
  27. Economics Case Solutions Solution and Analysis, Economics Case Solutions Solutions, Custom solved according to your need.
    Economics Case Study Solution

    ReplyDelete
  28. Our website is Number 1 in Electrical Assignment Online Help and Electrical Engineering Project Help.

    ReplyDelete
  29. How I Was Rescued By A God Fearing And Trusted Lender {Lexieloancompany@yahoo.com}..

    Hello, I am Andrew Thompson currently living in CT USA, God has bless me with two kids and a lovely Wife, I promise to share this Testimony because of God favor in my life, 2days ago I was in desperate need of money so I thought of having a loan then I ran into wrong hands who claimed to be loan lender not knowing he was a scam. he collected 1,500.00 USD from me and refuse to email me since then I was confuse, but God came to my rescue, one faithful day I went to church after the service I share idea with a friend and she introduce me to LEXIE LOAN COMPANY, she said she was given 98,000.00 USD by MR LEXIE , THE MANAGING DIRECTOR OF LEXIE LOAN COMPANY. So I collected his email Address , he told me the rules and regulation and I followed, then after processing of the Documents, he gave me my loan of 55,000.00 USD... well if you are interested in a loan you can as well contact him on this Email: Lexieloancompany@yahoo.com or call/sms on: +18168926958 thanks, I am sure he will also help you. Website: http://lexieloans.bravesites.com

    ReplyDelete
  30. Incredible! Much obliged for your archives, its been exceptionally useful. Much obliged again to share your data.
    TheCaseSolutions.com Review

    ReplyDelete
  31. TERBARU PROMO BONUS DEPOSIT 100% HANYA DI BETDANWIN POKER ONLINE INDONESIA TERPECAYA
    KURANG BERUNTUNG DI POKER YANG ANDA MAIKAN SEKARANG??
    SUDAH SAAT NYA ANDA BERMAIN DI POKER WWW.BETDANWIN.COM DAPATKAN JACKPOT SAMPAI RATUSAN JUTA RUPIAH.
    Minimal Deposit 10.000 Withdraw 20.000.
    WWW.BETDANWIN.COM
    JADILAH MEMBER AKTIF REFERRAL 50% SEUMUR HIDUP
    KUNJUNGI DAN LIKE FANPAGE KAMI https://www.facebook.com/BetdanWin-1071580636209445/?ref=ts&fref=ts

    ReplyDelete
  32. Truly exceptionally instructive website, I have bookmarked and searching for next one.
    Exercises in Lease Accounting Case Solution

    ReplyDelete
  33. Welcomes to google underwater keep sharing such ideas in the future as well. google mirror this was actually what i was looking for,and i am glad to came here!
    elgoog Hi! I’ve been reading your blog for a while google gravity I want you to thank for your time of this wonderful read!!! google terminal now and finally got the courage to go ahead and give youu a shout out from Austin Texas!
    google pacman Just wanted to tell you keep up the fantastic work!my weblog: google guitar I definately enjoy every little bit of it and I have you bookmarked to check out new stuff of your blog a must read blog! google snake
    Amazing insight you have on this, Happy wheels it's nice to find a website that details so much information about different artists... Age of war 2 This article always blew me... Earn to die For how many times I have read this.
    slither io
    slitherio
    big farm

    ReplyDelete
  34. The blog or and best that is extremely useful to keep I can share the ideas
    of the future as this is really what I was looking for, I am very comfortable and pleased to come here. Thank you very much.
    earn to die 3| earn to die 6
    earn to die 5| happy wheels
    strike force heroes| slitherio
    earn to die 5| good game empire |tank trouble 2 | earn to die 3

    ReplyDelete
  35. This blog is so nice to me. I will continue to come here again and again. Visit my link as well. Good luck
    obat aborsi
    cara menggugurkan kandungan
    obat telat datang bulan
    obat penggugur kandungan
    obat aborsi

    ReplyDelete
  36. Get a Loan Today At 3% Interest Rate, contact us at:davidloans760@gmail.com

    Welcome to DAVID JAMES Loan Company, This is a legit loan Company, formed to help individuals who are in need of financial crises and help them achieve their goals in life.

    Available Loans we offer are,

    1. Personal Loans (Secure and Unsecured)
    2. Business Loans (Secure and Unsecured)
    3. Combination Loan
    4. Consolidation Loan And Many More:

    Interested clients should please send request to our email for application form and terms. Try and see for your self, our wonderful services that does not exceed Working days for loan processing and just only (1)hour 35 minutes of loan Transfer.

    EMAIL---[ davidloans760@gmail.com ]

    Warm Regard

    ReplyDelete
  37. Apple IOS Assignment Help Introduction Revealed in 2007, it was initially suggested for iPhone gadgets however this was later on extended……….
    Apple IOS Project Help

    ReplyDelete
  38. It really give us another point of view. I am an owner jasaseo.website really thank for it.

    ReplyDelete
  39. Essay topics for high school students provide opportunities for writing and encouragement for students who attempt to write and have responsibility to promote students success in writing then carefully monitoring students writing to assess strength and weaknesses.

    ReplyDelete
  40. Huawei 4G USB modems i too prefer it for internet. Its awesome that you detected the harmful vulnerability. Its will be harmful to Internet and effect the pc too.
    Thanks for detecting it and solving this problems.
    Online Dissertation writing

    ReplyDelete