A newly discovered vulnerability known as Devils Ivy is causing a rash of Internet of Things (IoT) risks. An open source software library called gSOAP contains a communication-layer flaw that lets fraudsters carry out buffer overflow attacks by flooding port 80 with data. At least 34 companies are on record as using the code in their products, but the number may be much higher since the code is open source. So far, cameras are the only known vector for this newest open source attack, but with indications that even large vendors such as Microsoft are at risk.”]
Source: https://securityintelligence.com/news/new-devils-ivy-vulnerability-causing-rash-of-iot-risks/