Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

VRT update: Doubling down on hardware vulnerabilities

bugcrowd.com | blog | #hardware-security | #firmware | #bugcrowd | #vrt | #physical-security | #vulnerability-rating | #taxonomy | #vulnerability-taxonomy

Summary

VRT 1.13 adds hardware-focused entries: new P2/P3 vulnerabilities under Insecure OS/Firmware (default local admin, over-permissioned and shared credentials) plus a net-new Physical Security category.
Published
Collected

original ↗

Related coverage

  1. Accidental Engineer: Building My First Hardware Tool the Hard Way (bishopfox.com)
  2. VRT v1.10 Released: Flash downgrades and extended automotive categorization (bugcrowd.com)
  3. Bugcrowd Releases Vulnerability Rating Taxonomy 1.9 with More Classifications for Credential Exposure (bugcrowd.com)
  4. Bugcrowd Releases Vulnerability Rating Taxonomy 1.8 With New Indicators of Compromise (bugcrowd.com)
  5. Bugcrowd Releases Vulnerability Rating Taxonomy 1.7 With New Automotive Security Misconfiguration (bugcrowd.com)
  6. Bugcrowd Releases Vulnerability Rating Taxonomy 1.6 (bugcrowd.com)

back