BadAllow Flaw Endangers Millions of Cars and Medical Devices

This article has been indexed from Softpedia News / Security

Older versions of BlackBerry’s QNX Real-Time Operating System (RTOS) are vulnerable to a significant vulnerability allowing threat actors to take complete control and damage a wide range of devices, including industrial equipment, medical equipment, and cars. 

More than 195 million BlackBerry QNX-based vehicles and integrated systems are being used in a wide range of sectors worldwide, including aircraft, military, commercial vehicles, medical, cars, heavy machinery, industrial controls, rail, and robotics. 

The vulnerability in question has the tracking identifier CVE-2021-22156 and a CVSS score of 9.0, according to BlackBerry. So far, we know it is part of BadAlloc, a broader collection of vulnerabilities first discovered by Microsoft in April, and can open a backdoor into affected devices, allowing attackers to disrupt normal operations or execute malicious comm…

Read the original article: BadAllow Flaw Endangers Millions of Cars and Medical Devices