Sign up for our Technology Newsletter 
Cisco Fixes Major Flaw
Cisco has patched high-impact vulnerabilities in several of its cable modem and residential gateway devices which are popular among those distributed by ISPs to their customers.
The embedded Web server in the Cisco Cable Modem with Digital Voice models DPC2203 and EPC2203 contains a buffer overflow vulnerability that can be exploited remotely without authentication. Apparently all you need to do is send a crafted HTTP requests to the Web server and you could see some arbitrary code execution.
Cisco said that its customers should contact their service providers to ensure that the software version installed on their devices includes the patch for this issue.
The Web-based administration interfaces of the Cisco DPC3941 Wireless Residential Gateway with Digital Voice and Cisco DPC3939B Wireless Residential Voice Gateway are affected by a vulnerability that could lead to information disclosure. An unauthenticated, remote attacker could exploit the flaw by sending a specially crafted HTTP request to an affected device in order to obtain sensitive information from it.
The Cisco Model DPQ3925 8×4 DOCSIS 3.0 Wireless Residential Gateway with EDVA is affected by a separate vulnerability, also triggered by malicious HTTP requests, that could lead to a denial-of-service attack.
Hackers have been hitting modems, routers and other gateway devices, hard lately – especially those distributed by ISPs to their customers. By compromising such devices, attackers can snoop on, hijack or disrupt network traffic or can attack other devices inside local networks.
Courtesy-Fud
Acer Shifts Focus To IoT
Acer is still churning out PCs, but the Taiwanese vendor is far more bullish about the Internet of Things (IoT), a market the company doesn’t want to miss out on.
Acer held a news conference not for a new consumer product, but to promote an upcoming miniature PC that will be sold to developers.
The PC, called the aBeing One, will arrive in the third quarter, and is aimed at developers working in the IoT area. It’s designed to connect to smart home and wearable products, and act as a hub that can analyze incoming data from the devices.
The PC vendor has spoken to many IoT companies looking for an affordable hardware system they can develop on, said Robert Wang, a general manager with Acer.
“Fast-moving IoT developers keep running into this issue,” he said after Acer’s news conference. “Now they can buy from us.”
It’s a big change for the vendor, given that it once focused on selling consumer notebooks. However, with PC sales sagging and competition rife in the mobile devices area, the company has been shifting toward enterprise products.
That emphasis was apparent at this week’s Computex show in Taipei. Acer notebooks and tablets were still on display, but equal billing was given to itscloud computing business, which is starting to power IoT devices, not only from Acer, but also its clients.
In addition, Acer is hoping to pave the way for more third-party IoT devices. It has partnered with Canonical to install a version of Ubuntu on its aBeing product, so that the hardware can serve Ubuntu developers working on smart connected gadgets.