_
Man-in-the-Middle Remote Code Execution via CWMP in ReyeeOS
ReyeeOS contains an unprotected CWMP (CPE WAN Management Protocol) communication that allows attackers to intercept and manipulate device communication through a man-in-the-middle attack, enabling arbitrary command execution on Ruijie Reyee devices.
Read more →Introduction to Embedded System Hacking
Explain and explore embedded system hacking fundamentals, including static and dynamic analysis, real-world case studies, tools, and ethical considerations for security research and vulnerability disclosure.
Read more →Takeover Cloud Managed Router via CWMP Communication using MITM Scenario
Cloud Managed Routers are a combination of conventional routers and cloud management technology, developed to make it easier for users to remotely manage their routers. However, if implemented incorrectly, this feature can be exploited by unauthorized parties, and can even lead to the risk of router access being compromised. In this topic, I’ll briefly explain how this risk can arise.
Read more →