Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet.

I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet.

Scheduled Pinned Locked Moved Uncategorized
14 Posts 13 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

    I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

    tux0r@layer8.spaceT This user is from outside of this forum
    tux0r@layer8.spaceT This user is from outside of this forum
    tux0r@layer8.space
    wrote last edited by
    #4

    @malwaretech Ah, the joys of "security" software.

    1 Reply Last reply
    0
    • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

      I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

      alister@hachyderm.ioA This user is from outside of this forum
      alister@hachyderm.ioA This user is from outside of this forum
      alister@hachyderm.io
      wrote last edited by
      #5

      @malwaretech Yep,
      @jerry is right again... https://www.youtube.com/shorts/IlptuY-0qpA #ThoughtLeader #Cyber

      cliffsesport@mastodon.socialC nf3xn@mastodon.socialN 2 Replies Last reply
      0
      • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

        I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

        rgsteele@toque.townR This user is from outside of this forum
        rgsteele@toque.townR This user is from outside of this forum
        rgsteele@toque.town
        wrote last edited by
        #6

        @malwaretech WinNuke 2026! ☢️

        1 Reply Last reply
        0
        • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

          I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

          erik@mastodon.infrageeks.socialE This user is from outside of this forum
          erik@mastodon.infrageeks.socialE This user is from outside of this forum
          erik@mastodon.infrageeks.social
          wrote last edited by
          #7

          @malwaretech The ping of death is back!

          erik@mastodon.infrageeks.socialE 1 Reply Last reply
          0
          • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

            I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

            gloriouscow@oldbytes.spaceG This user is from outside of this forum
            gloriouscow@oldbytes.spaceG This user is from outside of this forum
            gloriouscow@oldbytes.space
            wrote last edited by
            #8

            @malwaretech without reading further, fortinet?

            1 Reply Last reply
            0
            • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

              I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

              bontchev@infosec.exchangeB This user is from outside of this forum
              bontchev@infosec.exchangeB This user is from outside of this forum
              bontchev@infosec.exchange
              wrote last edited by
              #9

              @malwaretech You should have waited till Friday. That's the Vulnerability Disclosure Day, isn't it?

              1 Reply Last reply
              0
              • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

                I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

                jamesmarshall@sfba.socialJ This user is from outside of this forum
                jamesmarshall@sfba.socialJ This user is from outside of this forum
                jamesmarshall@sfba.social
                wrote last edited by
                #10

                @malwaretech reminds me of the 1990s (?) dirt-simple exploit whereby you could crash a Windows machine merely by sending it any OOB packet. Yes, I tried it and it worked. I later saw code for it in an exhibit of various exploits at Madrid's Reina Sofia art museum. Cool exhibit.

                1 Reply Last reply
                0
                • alister@hachyderm.ioA alister@hachyderm.io

                  @malwaretech Yep,
                  @jerry is right again... https://www.youtube.com/shorts/IlptuY-0qpA #ThoughtLeader #Cyber

                  cliffsesport@mastodon.socialC This user is from outside of this forum
                  cliffsesport@mastodon.socialC This user is from outside of this forum
                  cliffsesport@mastodon.social
                  wrote last edited by
                  #11

                  @alister @malwaretech @jerry@infosec.exchange Recursive Firewalls, pro move.

                  1 Reply Last reply
                  0
                  • malwaretech@infosec.exchangeM malwaretech@infosec.exchange

                    I found a zero day in a security vendor's firewall software that allows you to remotely crash the entire system by sending it a single malicious packet. Since the firewall is responsible for inspecting traffic prior to the operating system handling it, no ports even need to be open for it to work.

                    anachronistjohn@zia.ioA This user is from outside of this forum
                    anachronistjohn@zia.ioA This user is from outside of this forum
                    anachronistjohn@zia.io
                    wrote last edited by
                    #12
                    @malwaretech I wonder how much more difficult it is now to report vulnerabilities now that everyone is using “AI” to generate so much crap.
                    1 Reply Last reply
                    0
                    • alister@hachyderm.ioA alister@hachyderm.io

                      @malwaretech Yep,
                      @jerry is right again... https://www.youtube.com/shorts/IlptuY-0qpA #ThoughtLeader #Cyber

                      nf3xn@mastodon.socialN This user is from outside of this forum
                      nf3xn@mastodon.socialN This user is from outside of this forum
                      nf3xn@mastodon.social
                      wrote last edited by
                      #13

                      @alister @malwaretech @jerry you need seven layers of firewall just like you need seven proxies duh.

                      1 Reply Last reply
                      0
                      • erik@mastodon.infrageeks.socialE erik@mastodon.infrageeks.social

                        @malwaretech The ping of death is back!

                        erik@mastodon.infrageeks.socialE This user is from outside of this forum
                        erik@mastodon.infrageeks.socialE This user is from outside of this forum
                        erik@mastodon.infrageeks.social
                        wrote last edited by
                        #14

                        @malwaretech Oh, but before I go crazy here, does it manage to log the source of the packet before crashing? 😜

                        1 Reply Last reply
                        0
                        • R relay@relay.publicsquare.global shared this topic
                        Reply
                        • Reply as topic
                        Log in to reply
                        • Oldest to Newest
                        • Newest to Oldest
                        • Most Votes


                        • Login

                        • Login or register to search.
                        • First post
                          Last post
                        0
                        • Categories
                        • Recent
                        • Tags
                        • Popular
                        • World
                        • Users
                        • Groups