corpus.blog
41554 blogs · 4,504,310 posts Claim your blog
Record · corpus.blog/posts/01a08783-9c55-73f6-9c6e-ccf93805ee87

Finding a command injection vulnerability in my smart thermostat (CVE-2023-4212)

hmcguinn.com · published 22 August 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hmcguinn.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
33
Words captured
2,744

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.trane.com/residential/en/products/thermostats-and-controls/smart-thermostats/
trane.com
https://nvd.nist.gov/vuln/detail/CVE-2023-4212
nvd.nist.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-23-234-02
cisa.gov
https://www.first.org/cvss/calculator/3.0
first.org
https://censys.io/
censys.io
https://censys.io/why-internet-connected-ot-infrastructure-presents-a-security-risk-to-company-data/
censys.io
https://www.noaa.gov/news/summer-2021-neck-and-neck-with-dust-bowl-summer-for-hottest-on-record
noaa.gov
https://blog.talosintelligence.com/trane-iot/
blog.talosintelligence.com
https://www.gtri.gatech.edu/newsroom/gtri-team-wins-10000-navy-hacking-competition
gtri.gatech.edu
https://web.archive.org/web/20190703150036/https://blogs.cisco.com/wp-content/uploads/msf-talos-2015-026.rb_.txt
web.archive.org
https://en.wikipedia.org/wiki/Man-in-the-middle_attack
en.wikipedia.org
https://robertheaton.com/2019/11/21/how-to-man-in-the-middle-your-iot-devices/
robertheaton.com
https://www.mynexia.com
mynexia.com
https://portswigger.net/support/using-burp-suites-invisible-proxy-settings-to-test-a-non-proxy-aware-thick-client-application
portswigger.net
https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE
owasp.org
https://jcjc-dev.com/2016/04/08/reversing-huawei-router-1-find-uart/
jcjc-dev.com
https://fccid.io
fccid.io
https://fccid.io/XVR-CONT8241/Internal-Photos
fccid.io
https://www.nxp.com/part/MCIMX283CVM4B
nxp.com
https://ghidra-sre.org/
ghidra-sre.org
https://www.trane.com/content/dam/Trane/residential/downloads/r850_144040426701.tar
trane.com
https://media.rootcon.org/ROOTCON%2010/Talks/ROOTCON%2010%20-%20Tranewreck.pdf
media.rootcon.org
https://github.com/onekey-sec/ubi_reader
github.com
https://semgrep.dev/docs/getting-started/
semgrep.dev
https://en.wikipedia.org/wiki/Filename
en.wikipedia.org
http://ruby-for-beginners.rubymonstas.org/bonus/string_interpolation.html
ruby-for-beginners.rubymonstas.org
https://github.com/JeffKitson/Tranewreck_tools
github.com
https://retool.com/
retool.com
https://www.cisa.gov
cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-21-292-02
cisa.gov
https://www.zdnet.com/article/chilling-effect-lawsuits-threaten-security-research-need-it-most/
zdnet.com
https://www.eff.org/
eff.org
https://www.eff.org/issues/coders/vulnerability-reporting-faq
eff.org