All the 4G Modules Could be Hacked!
0Shupeng Gao | Senior Security Researcher, Baidu Security Lab
Haikuo Xie | Senior Security Researcher, Baidu Security Lab
Zheng Huang | Leader of Baidu Security Lab X-Team, Baidu Security Lab
Zhang Ye | Security Researcher, Baidu Security Lab
Location: South Seas CDF
Date: Wednesday, August 7 | 1:30pm-2:20pm
Format: 50-Minute Briefings
Tracks: Internet of Things, Hardware/Embedded
Nowadays more and more 4G modules are built into IoT devices around the world, such as vending machines, car entertainment systems, laptops, advertising screens, urban cameras etc. But no one has conducted comprehensive security research on the 4G modules. We carried out this initiative and tested all the major brand 4G modules in the market (more than 15 different types). The results show all of them have similar vulnerabilities, including remote access with weak passwords, command injection of AT Command/listening services, OTA upgrade spoofing, command injection by SMS, and web vulnerability. Through these vulnerabilities we were able to get to the shell of these devices. In addition to using wifi to exploit these vulnerabilities, we created a new way to attack through fake base station system, triggered by accessing the intranet of cellular network, and successfully run remote command execution without any requisites. In this talk, we will first give an overview on the hardware structure of these modules. Then we will present the specific methods we use in vulnerability probe. In the final section we will demonstrate how to use these vulnerabilities to attack car entertainment systems of various brands and get remote control of cars.
Black Hat - USA - 2019 Hacking conference
#hacking, #hackers, #infosec, #opsec, #IT, #security