{"id":11709,"date":"2022-10-03T07:00:00","date_gmt":"2022-10-03T15:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=11709"},"modified":"2021-12-14T21:07:37","modified_gmt":"2021-12-15T05:07:37","slug":"iot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/iot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum\/","title":{"rendered":"IoT Vulnerabilities:  They&#8217;re There.  They&#8217;re Hard to Fix. And Vendors are Mum."},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Vendors of IoT products have been slow to release information about the security vulnerabilities that have been found in their products.  In the first six months of 2021, <a href=\"https:\/\/iottechnews.com\/news\/2021\/sep\/07\/kaspersky-attacks-on-iot-devices-double-in-a-year\/\" data-type=\"URL\" data-id=\"https:\/\/iottechnews.com\/news\/2021\/sep\/07\/kaspersky-attacks-on-iot-devices-double-in-a-year\/\">Kaspersky estimates<\/a> that thre were 1.5 billion attacks against IoT products.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A <a href=\"https:\/\/resources.ordr.net\/reports\/rise-of-the-machines-2021\" data-type=\"URL\" data-id=\"https:\/\/resources.ordr.net\/reports\/rise-of-the-machines-2021\">report by Ordr<\/a> found that 46 percent of IoT devices were vulnerable to medium and high-severity attacks.  Researchers in the UK at <a href=\"https:\/\/www.copperhorse.co.uk\/tag\/vulnerability-disclosure\/\" data-type=\"URL\" data-id=\"https:\/\/www.copperhorse.co.uk\/tag\/vulnerability-disclosure\/\">Copper Horse found <\/a>that only 21 percent of vendors selling consumer IoT products had any kind of program in place for being able to disclose vulnerabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A study by the<a href=\"https:\/\/www.iotsecurityfoundation.org\/wp-content\/uploads\/2021\/11\/The-Contemporary-Use-of-Vulnerability-Disclosure-in-IoT-IoTSF-Report-4-November-2021.pdf\" data-type=\"URL\" data-id=\"https:\/\/www.iotsecurityfoundation.org\/wp-content\/uploads\/2021\/11\/The-Contemporary-Use-of-Vulnerability-Disclosure-in-IoT-IoTSF-Report-4-November-2021.pdf\"> IoT Security Foundation<\/a> found that &#8220;almost four out of five companies are still failing to provide the very basic security hygiene mechanism to allow security vulnerabilities to be reported to vendors so they can be fixed.&#8221;<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/12\/image-2.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/12\/image-2.png\" alt=\"\" class=\"wp-image-11710\" width=\"590\" height=\"451\" srcset=\"https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/12\/image-2.png 688w, https:\/\/formtek.com\/blog\/wp-content\/uploads\/2021\/12\/image-2-300x230.png 300w\" sizes=\"auto, (max-width: 590px) 100vw, 590px\" \/><\/a><figcaption><strong><a href=\"https:\/\/www.iotsecurityfoundation.org\/wp-content\/uploads\/2021\/11\/The-Contemporary-Use-of-Vulnerability-Disclosure-in-IoT-IoTSF-Report-4-November-2021.pdf\" data-type=\"URL\" data-id=\"https:\/\/www.iotsecurityfoundation.org\/wp-content\/uploads\/2021\/11\/The-Contemporary-Use-of-Vulnerability-Disclosure-in-IoT-IoTSF-Report-4-November-2021.pdf\">Only one-fifth of IoT hardware vulnerabilities are being disclosed<\/a><\/strong><\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.linkedin.com\/in\/larry-oconnell97\/\" data-type=\"URL\" data-id=\"https:\/\/www.linkedin.com\/in\/larry-oconnell97\/\">Larry O\u2019Connell<\/a>, vice president of marketing at  Sequitur Labs , <a href=\"https:\/\/www.eetimes.com\/iot-vendors-resist-vulnerability-reporting\/\" data-type=\"URL\" data-id=\"https:\/\/www.eetimes.com\/iot-vendors-resist-vulnerability-reporting\/\">told EETimes<\/a> that \u201cthe microprocessor is hard to secure&#8230; In 2022, a huge increase in the AI deployments within smart devices at the network edge will only increase the urgency of securing IoT and industrial IoT devices due to the raw amount of data being processed. IP is now at the edge.\u201d<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fiot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Vendors of IoT products have been slow to release information about the security vulnerabilities that have been found in their products. In the first six months of 2021, Kaspersky estimates that thre were 1.5 billion attacks against IoT products. A<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/iot-vulnerabilities-theyre-there-theyre-hard-to-fix-and-vendors-are-mum\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-11709","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11709","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=11709"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11709\/revisions"}],"predecessor-version":[{"id":11711,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11709\/revisions\/11711"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=11709"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=11709"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=11709"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}