Security Assessment of a Safety System Controller

We conducted a detail assessment of a fire and smoke safety equipment for airplanes. The key challenge was to evaluate vulnerabilities developed in the legacy system due to an ethernet interface introduction. Our team identified several vulnerabilities including configuration feature lock bypass, cross site scripting, privilege escalation, and insecure application logging. 

Download to know more.