Finding And Exploiting Bugs In TLS Libraries Used By “Smart” UPS Devices by Yuval Sarel and Gal Levy

Abstract:
------------------
UPS devices are becoming “Smart”, connected devices that can be controlled by the Cloud. This offers advanced features, but also exposes an attack surface through which attackers may be able to remotely take over the power lifeline of an organization. This talk will detail a number of zero-click preauthentication vulnerabilities we’ve discovered in a prominent UPS vendor. In addition we will explore the physical threats involved with controlling a sensitive battery-powered device, and demo an attack that can literally “blow up”.

Speaker Bio:
----------------------
Yuval Sarel is a security research team lead at Armis, responsible for hunting zero days, reverse engineering and developing innovative solutions. Formerly an R&D team lead in the IDF, Yuval's main focus today is finding new topics to research to raise awareness about cyber security in a fun and interesting way.

#SmartUPS #vulnerability #NullconBerlin
-------------------------------------------------------------------------