[binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages
Description
Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/pwning-wd-nas-netgear-routers-and-overflowing-kernel-pages.html
Plenty of exploit strategy talk this week with vulnerabilities and complete exploits targeting a NAS, a router, and a Linux Kernel module with a page-level overflow.
[00:00:26 ] Spot the Vuln - Normalized Regex
[00:01:52 ] Remote Code Execution on Western Digital PR4100 NAS (CVE-2022-23121)
[00:07:10 ] Defeating the Netgear R6700v3
[00:18:36 ] Exploit esp6 modules in Linux kernel [CVE-2022-27666]
[00:27:17 ] Racing against the clock -- hitting a tiny kernel race window
The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week:
- Mondays at 3:00 pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
- Tuesdays at 7:00 pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.
The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec
You can also join our discord: https://discord.gg/daTxTK9
Or follow us on Twitter (@dayzerosec) to know when new releases are coming.