AnsweredAssumed Answered

Updated Urgent/11 Detection?

Question asked by Robert Sloan on Oct 3, 2019
Latest reply on Oct 25, 2019 by Robert Dell'Immagine

Given the latest information around Urgent/11 from Armis (URGENT/11 Affects Additional RTOSs Highlights Risks on Medical Devices | Armis )(Armis Discovers Expanded Reach of URGENT/11 That Highlights Risk to Medical Devices | Markets Insider ), and Armis' release of a detection tool (GitHub - ArmisSecurity/urgent11-detector: URGENT/11 detection tool by Armis ), can we assume there will be an update to QID 13534 to expand past VxWorks OS assets. Also, and possibly more importantly, will the definition be updated to not rely wholly on FTP server banners as these are not always present and these types of assets aren't generally capable of leveraging the agent or authenticated scanning?