Podcasts Technology Day[0] [binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages

[binary] Pwning WD NAS, NetGear Routers, and Overflowing Kernel Pages

Published: March 31, 2022, midnight

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/pwning-wd-nas-netgear-routers-and-overflowing-kernel-pages.html

\n

Plenty of exploit strategy talk this week with vulnerabilities and complete exploits targeting a NAS, a router, and a Linux Kernel module with a page-level overflow.

\n

[00:00:26] Spot the Vuln - Normalized Regex

\n

[00:01:52] Remote Code Execution on Western Digital PR4100 NAS (CVE-2022-23121)

\n

[00:07:10] Defeating the Netgear R6700v3

\n

[00:18:36] Exploit esp6 modules in Linux kernel [CVE-2022-27666]

\n

[00:27:17] Racing against the clock -- hitting a tiny kernel race window

\n

The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week:

\n

    \n\t
  • Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities
    • \n\t
  • Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.
    • \n
\n

The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec

\n

You can also join our discord: https://discord.gg/daTxTK9

\n

Or follow us on Twitter (@dayzerosec) to know when new releases are coming.