Research Blog
Stay up to date with the newest security advisories, vulnerability reports, and platform developments—keeping your products secure and compliant.
Featured research articles
%201.avif)
All research articles
Advisory: Cisco ATA19X Privilege Escalation and RCE
We found lacking user privilege separation enforcement and post-authentication command injection remote code execution within Cisco ATA19X firmware.
Swimming Upstream: Uncovering Broadcom SDK vulnerabilities from bug reports
IoT Inspector identified security vulnerabilities affecting the UPnP implementation of Broadcom’s SDK that affect vendors such as Cisco or Linksys.
Advisory: Multiple issues in Realtek SDK affect hundreds of thousands of devices down the supply chain
At least 65 vendors affected by severe vulnerabilities that enable unauthenticated attackers to fully compromise the target device.
Advisory: Cisco RV34X Series - Privilege Escalation in vpnTimer
IoT Inspector detected a rare security vulnerability in Cisco's RV34X Series. Read the full root analysis on the blog!
Advisory: Multiple Issues in Libre Wireless LS9 Modules - And the Problem with Third Party Products
IoT Inspector detected security vulnerabilities in the Gigaset L800HX smart speaker, which is actually based on a third party module (Libre Wireless LS9).
Advisory: Cisco RV34X Series - Authentication Bypass and Remote Command Execution
IoT Inspector identified security issues in Cisco's RV34X series of devices. Read the full root analysis on our blog!
Advisory: Fibaro Home Center - Multiple Vulnerabilities (CVE-2021-20989, CVE-2021-20990, CVE-2021-20991, CVE-2021-20992)
IoT Inspector discovered multiple vulnerabilities in the Fibaro Home Center 2 and Home Center Lite. Users are advised to upgrade.
Patch Diffing Entire Firmware Images, Squeezing Out Bugs
Firmware patch diffing is a relatively under-documented, but important process in IoT security research. Let's look at a real-world example!
check out white papers
Explore in-depth whitepapers on cybersecurity and compliance, designed to strengthen your product’s security and compliance.
Ready to automate your Product Cybersecurity & Compliance?
Make cybersecurity and compliance efficient and effective with ONEKEY.