BlackBerry software flaw could impact cars, medical devices – U.S. agencies – ET CISO
The warning came after the Canadian company disclosed that itsReal Time Operating System has a vulnerability that could allow an attacker to execute an arbitrary code or flood a server with traffic until it crashes or gets paralyzed.
The software is used by automakers including, BMW and Ford Motor in many critical functions including the Advanced Driver Assistance System.
The U.S.and Infrastructure Security Agency (CISA) said the software is used in a wide range of products and its compromise “could result in a malicious actor gaining control of highly sensitive systems, increasing risk to the Nation’s critical functions”, the CISA said https://us-cert.cisa.gov/ncas/alerts/aa21-229a.
The federal agency that comes under the Department of Homeland Security and the company said they were not yet aware of any case of active exploitation of the flaw.
The U.S. Food and Drug Administration said it was not aware of any adverse events even as medical equipment manufacturers assess which systems could be affected.
BlackBerry had initially denied that the vulnerability, dubbed as BadAlloc, impacted its products and later resisted making a public announcement,reported, citing two people familiar with talks between the company and federal cybersecurity officials, including a government employee.