Israeli company JSOF found 19 flaws in an embedded TCP/IP library. Some of the flaws allow for remote code execution over the network and can lead to a full compromise of the affected device. Products from 11 vendors have been confirmed as vulnerable, including infusion pumps, printers, UPS systems, networking equipment, point-of-sale devices, IP cameras, video conferencing systems, building automation devices, and ICS devices. The flaws highlight the difficulty of understanding the scope of security vulnerabilities in the IoT and embedded device world.”]

