---
id: 7387
title: "Cuộc chiến White Box và Black Box trong truy tìm lỗ hổng bảo mật ở thiết bị IoTs"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cuoc-chien-san-bug-trong-thiet-bi-iots-bang-phuong-phap-white-box-va-black-box/"
published_at: "2021-04-06T03:46:17Z"
tags: ["vulnerability-research", "iot", "netgear", "black-box", "white-box", "firmware-analysis", "zdi"]
phying_url: "https://phying.com/item/7387"
lang: en
---

# Cuộc chiến White Box và Black Box trong truy tìm lỗ hổng bảo mật ở thiết bị IoTs

## Summary

Two researchers independently found auth-bypass flaws ZDI-20-1176 and ZDI-20-1451 in NETGEAR's mini_httpd; the post compares their white-box source analysis and black-box approaches.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2021-04-06T03:46:17Z
- **Original:** https://blog.viettelcybersecurity.com/cuoc-chien-san-bug-trong-thiet-bi-iots-bang-phuong-phap-white-box-va-black-box/
- **Phying News:** https://phying.com/item/7387