Exploiting zero days in abandoned hardware
blog.trailofbits.com | blog | #zero-day | #firmware | #hardware-hacking | #iot-security | #trail-of-bits | #exploit-chain | #eol-hardware
Summary
Trail of Bits researchers exploited a Netgear router and Bitdefender Box at DistrictCon's Junkyard contest, chaining UPnP and firmware downgrade flaws into remote root shells on end-of-life hardware.
- Published
- Collected
--- id: 1370 title: "Exploiting zero days in abandoned hardware" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2025/07/25/exploiting-zero-days-in-abandoned-hardware/" published_at: "2025-07-25 11:00" tags: ["zero-day", "firmware", "hardware-hacking", "iot-security", "trail-of-bits", "exploit-chain", "eol-hardware"] phying_url: "https://phying.com/item/1370" lang: en --- # Exploiting zero days in abandoned hardware ## Summary Trail of Bits researchers exploited a Netgear router and Bitdefender Box at DistrictCon's Junkyard contest, chaining UPnP and firmware downgrade flaws into remote root shells on end-of-life hardware. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2025-07-25 11:00 - **Original:** https://blog.trailofbits.com/2025/07/25/exploiting-zero-days-in-abandoned-hardware/ - **Phying News:** https://phying.com/item/1370