Latest in Gear

Image credit:

Amazon fixes security flaws allowing smart home hijacks

The real-time OS had 13 flaws affecting a wide range of devices.
Jon Fingas, @jonfingas
October 21, 2018
Share
Tweet
Share

Sponsored Links

basketman23 via Getty Images

Some smart home device owners may have dodged a bullet. Amazon recently patched 13 security flaws in an operating system for the Internet of Things, FreeRTOS, as well as Amazon Web Services connection modules. The holes let intruders crash devices, leak the contents of their memory and remotely run code, effectively giving attackers full control. The flaws might have been far-reaching if they'd gone unfixed -- both FreeRTOS and its safety-oriented counterpart SafeRTOS are used in a wide range of devices inside and outside the home, including cars, aircraft and medical gear.

Zimperium, which found the flaws, is waiting until 30 days after the disclosure to provide the technical details required by FreeRTOS' open source license. This should give smaller outfits an opportunity to fix the flaws, Zimperium said.

These kinds of flaw disclosures are far from unusual, but they're relatively new here. Amazon Web Services took the reins for FreeRTOS' core just under a year ago in November 2017. This was a test of sorts for Amazon's ability to respond to these issues, and so far it appears to have passed.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

RISC-V is trying to launch an open-hardware revolution

RISC-V is trying to launch an open-hardware revolution

View
Scientists found an Earth-sized ‘rogue’ planet in the Milky Way

Scientists found an Earth-sized ‘rogue’ planet in the Milky Way

View
Tesla raises price of Full Self-Driving mode to $10,000 now that it's in beta

Tesla raises price of Full Self-Driving mode to $10,000 now that it's in beta

View
Jabra Elite 85t review: Noise-blocking comfort that rivals the best

Jabra Elite 85t review: Noise-blocking comfort that rivals the best

View
The Morning After: Netflix price hike takes HD streaming to $14 per month

The Morning After: Netflix price hike takes HD streaming to $14 per month

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr