Page 1 of 1

"Misfortune Cookie" vulnerability.

Posted: Fri Dec 19, 2014 11:01 pm
by johnsmith
"Misfortune Cookie" vulnerability:

http://www.theregister.co.uk/2014/12/18 ... une_cookie
http://mis.fortunecook.ie/misfortune-co ... erable.pdf

It's been reported that the Billion Sky, BiPAC 5102C, BiPAC 5102S, BiPAC 5200S, and BIPAC-5100 are vulnerable to an attack that allows an intruder to remotely take over them and use them to attack the devices connected to them.

The list is not complete, exhaustive, or error-proof as they did not attempt to test all models.

I own a BiPAC 7800N and a BiPAC 7800VDOX can it be confirmed that these models are not vulnerable. If they are vulnerable when will a firmware update be available.

Regards, John.

Re: "Misfortune Cookie" vulnerability.

Posted: Mon Dec 22, 2014 9:32 am
by billion_fan
johnsmith wrote:"Misfortune Cookie" vulnerability:

http://www.theregister.co.uk/2014/12/18 ... une_cookie
http://mis.fortunecook.ie/misfortune-co ... erable.pdf

It's been reported that the Billion Sky, BiPAC 5102C, BiPAC 5102S, BiPAC 5200S, and BIPAC-5100 are vulnerable to an attack that allows an intruder to remotely take over them and use them to attack the devices connected to them.

The list is not complete, exhaustive, or error-proof as they did not attempt to test all models.

I own a BiPAC 7800N and a BiPAC 7800VDOX can it be confirmed that these models are not vulnerable. If they are vulnerable when will a firmware update be available.

Regards, John.
Currently non our current products are effected by the misfortune cookie vulnerability, (BiPAC 5102C, BiPAC 5102S, BiPAC 5200S, and BIPAC-5100 are all discontinued now)

So the 7402 series, 7800 series, 8800 series, 7300 series, 7700 series etc are not effected.