Wednesday, January 22, 2025
HomeVulnerabilityNetSpectre - New Spectre Remote Attack over Network Affected Billions of...

NetSpectre – New Spectre Remote Attack over Network Affected Billions of Devices

Published on

SIEM as a Service

Follow Us on Google News

Group of Security researchers discovered new Spectre remote attack called NetSpectre over a network connection that affected nearly billion of devices around the world.

Previously discovered highly critical vulnerabilities Spectre and Meltdown have been made a huge impact on IT sectors and the attack works on mobile devices, personal computers, and cloud infrastructure depends on the cloud providers.

Other Spectre level attacks are required local user interaction and the attacker needs to Trick victims to download some malicious file and execute into their system.

Earlier of this month, Intel rewarded $100,000 for two security researchers to find the CPU Spectre level critical vulnerability which leads to leak confidential information through microarchitectural side channels.

But this remote NetSpectre attack shift from local attacks, to remote attacks, exposing a much wider range and a larger number of devices.

It’s believed that all processors, including Intel, AMD, and ARM chips, vulnerable to Spectre variant 1 are also vulnerable to NetSpectre.

Also, these NetSpectre attacks work in local-area networks as well as between virtual machines in the Google cloud.

NetSpectre leaks sensitive data, such as encryption keys or passwords, using the NetSpectre attack in a cloud environment.

Also, Researchers demonstrate that especially in this remote scenario, attacks based on weaker gadgets which do not leak actual data, are still very powerful to break address-space layout randomization remotely.

Like a nearby Spectre Attack, new remote Attack requires the nearness of a Spectre contraption in the code of the objective.

This generic remote Spectre attack, allowing to read arbitrary memory over the network which contains the required Spectre gadgets in an exposed network interface.

According to the Researchers,  We show that memory access latency, in general, can be reflected in the latency of network requests. Hence, we demonstrate that it is possible for an attacker to distinguish cache hits and misses on specific cache lines remotely, by measuring and averaging over a larger number of measurements

Establishing a network connection to a service running exploitable snippets of code should, in theory, be enough to very slowly discern the contents of application memory remotely.

According to Michael Schwartz, “We show that Spectre attacks do not require local code execution but can also be mounted remotely,” Moreover, with the new covert channel, we show that Spectre does not necessarily require the cache to leak values.”

This requires precise timing and constant measurement, so noisy network environments, such as the internet, will hamper exploitation to some extent.

The paper, written by Michael Schwarz, Daniel Gruss, Martin Schwarzl, Moritz Lipp, and Stefan Mangard of the Austria’s Graz University of Technology and name as “NetSpectre: Read Arbitrary Memory over Network”.

The specialists announced the NetSpectre attack technique to Intel, which asserts that issue has just been alleviated in the firmware refreshes the chip creator made accessible for the CVE-2017-5753 Specter variation Attack.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

PoC Exploit Released for TP-Link Code Execution Vulnerability(CVE-2024-54887)

A security researcher, exploring reverse engineering and exploit development, has successfully identified a critical...

Brave Browser Vulnerability Allows Malicious Website Appears as Trusted One

A security vulnerability has been identified in Brave Browser, potentially allowing malicious websites to...

Beware! Fake SBI Reward APK Attacking Users to Deliver Android Malware

A recent phishing campaign has targeted customers of SBI Bank through a deceptive message...

Gootloader Malware Employs Blackhat SEO Techniques To Attack Victims

The Gootloader malware family employs sophisticated social engineering tactics to infiltrate computers.By leveraging...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

PoC Exploit Released for TP-Link Code Execution Vulnerability(CVE-2024-54887)

A security researcher, exploring reverse engineering and exploit development, has successfully identified a critical...

Brave Browser Vulnerability Allows Malicious Website Appears as Trusted One

A security vulnerability has been identified in Brave Browser, potentially allowing malicious websites to...

Apache CXF Vulnerability Triggers DoS Attack

Colm O hEigeartaigh announced a critical vulnerability affecting various versions of Apache CXF, a...