Controlling devices with built-in management tools

Aug. 4, 2014

Researchers from Accuvant Labs discovered vulnerabilities in built-in management tools of mobile devices. Carriers use such kind of management tools to remotely configure the devices and send OTA (Over-The-Air) upgrades to the devices. The magement tool runs with high privileges and encryption and authentication that should improve security of their access is often poorly implemented. More information about the attacks will be presented at next Black Hat conference.