CVE-2021-34571, CVE-2021-34572, CVE-2021-34573, CVE-2021-34576

POLČÁK, L.

Originální název

CVE-2021-34571, CVE-2021-34572, CVE-2021-34573, CVE-2021-34576

Anglický název

CVE-2021-34571, CVE-2021-34572, CVE-2021-34573, CVE-2021-34576

Druh

Zpráva odborná

Originální abstrakt

We analyzed water metering systems deployed in residential buildings. During the research, we revealed vulnerabilities as a consquence of violating CEN standards, for example shared keys without the posibility of customization, broken integrity and confidentiality of the readouts. We reported the vulnerabilities to the CVE database:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34571
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34572
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34573
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34576

We published security advisories:

https://www.fit.vutbr.cz/~polcak/CVE-2021-34571.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34572.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34573.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34576.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34577.html.en

Anglický abstrakt

We analyzed water metering systems deployed in residential buildings. During the research, we revealed vulnerabilities as a consquence of violating CEN standards, for example shared keys without the posibility of customization, broken integrity and confidentiality of the readouts. We reported the vulnerabilities to the CVE database:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34571
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34572
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34573
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34576

We published security advisories:

https://www.fit.vutbr.cz/~polcak/CVE-2021-34571.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34572.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34573.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34576.html.en
https://www.fit.vutbr.cz/~polcak/CVE-2021-34577.html.en

Autoři

POLČÁK, L.

Vydáno

01.09.2021

Místo

Frankfurt am Main

Strany počet

4

Plný text v Digitální knihovně

http://hdl.handle.net/

BibTex

@misc{BUT172514,
  author="Libor {Polčák}",
  title="CVE-2021-34571, CVE-2021-34572, CVE-2021-34573, CVE-2021-34576",
  year="2021",
  pages="4",
  address="Frankfurt am Main"
}