GEN "Checked 81 IoT Firmwares and Found 9,990 Security Vulnerabilities"

Nearly 10,000 security vulnerabilities were discovered after inspecting 81 Internet of Things (IoT) firmware used by domestic companies, financial institutions, and public organizations.

IoT security specialist company 'Gien' announced the results of a beta test conducted with its security solution Z-IoT from July 7 to 11. A total of 61 entities participated in the beta test, including manufacturers, ICT companies, financial institutions, and public organizations.

Through this test, a total of 9,990 security vulnerabilities were identified across 81 firmware. Among them, numerous zero-day vulnerabilities (security flaws for which patches have not yet been released) were found. On average, about 123 issues were discovered per firmware.

Z-IoT is a solution that automatically inspects firmware embedded in IoT devices and was showcased last month at Asia's largest security conference, ISEC 2024 (the 18th International Security Conference).

Provided as a SECaaS (Security as a Service) model, this solution identifies security vulnerabilities within firmware through analysis of ▲passwords ▲encryption ▲executable files ▲open source components ▲zero-day vulnerabilities, and also suggests security solutions.

Gien explained that since it automatically inspects security easily without requiring expert knowledge, it can save costs and time for security checks and help prevent security incidents.

Jo Young-min, CEO of Gien, said, "Through this beta test, we were able to prove the effectiveness of Z-IoT," adding, "We plan to further expand opportunities to provide practical security solutions to customers across various industries."

In October, Gien attracted attention by demonstrating IoT hacking scenarios using Chinese-made Wi-Fi routers and malicious QR codes (Qusing) during the ICT sector audit held at the National Assembly. The demonstration introduced a process that could crack a password in just five seconds if the IP address is known, raising awareness about cybersecurity.