Cov kws tshawb fawb ntawm Check Point Research (CPR) tau tshawb pom qhov muaj kev nyab xeeb tsis zoo hauv Qualcomm's 5G mobile chaw nres tsheb modem (MSM). Yog tias siv ua phem, qhov tsis txaus ntseeg tuaj yeem tso cai rau cov neeg siv los nruab thiab zais cov ntawv thov tsis zoo, nkag mus rau cov ntawv xov xwm, thiab ntau dua.
CPR qhia qhov tsis zoo hauv kev tshaj tawm xa mus rau Lifewire, ceeb toom tias nws tuaj yeem pom hauv Qualcomm's tam sim no MSMs, suav nrog nws cov 5G chipsets. Cov chips no feem ntau pom muaj nyob rau hauv cov khoom siv high-end xws li Google, Samsung, Xiaomi, thiab LG smartphones, thiab yog lub luag haujlwm rau tag nrho cov cuab yeej kev sib txuas lus ntawm tes. Vim tias Qualcomm chips tau siv ntau lub cuab yeej ntse-Qualcomm MSMs tuaj yeem pom nyob rau hauv kwv yees li 32% ntawm cov xov tooj thoob ntiaj teb xyoo 2020-qhov muaj peev xwm ncav cuag qhov tsis zoo no loj heev.
Ib qho kev txhawj xeeb loj tshaj plaws nyob ib puag ncig qhov kev nyab xeeb qhov tsis raug yog qhov nkag mus uas nws tuaj yeem ua rau cov neeg phem phem. Yog tias siv tau, CPR hais tias qhov tsis zoo tuaj yeem tso cai rau cov neeg siv nkag mus rau MSM los ntawm kev ua haujlwm, nws tus kheej. Qhov no tuaj yeem tso cai rau tus neeg tawm tsam zais ntau qhov kev nkag uas nws muaj thiab cov haujlwm uas nws ua tiav. Nyob rau sab saum toj ntawm kev nkag mus rau cov ntawv xov xwm, qhov kev siv dag zog tuaj yeem ua rau tus neeg tsis zoo nkag mus rau koj lub xov tooj hu lub suab, thiab tseem tso cai rau lawv qhib koj lub cuab yeej SIM.
"Cellular modem chips feem ntau suav hais tias yog lub kaus mom hlau rau cov neeg tawm tsam cyber, tshwj xeeb tshaj yog cov chips tsim los ntawm Qualcomm," Yaniv Balmas, tus thawj coj ntawm kev tshawb fawb cyber ntawm Check Point Software Technologies, tau sau rau hauv xov xwm tshaj tawm.
"Kev tawm tsam ntawm Qualcomm modem chips muaj peev xwm ua rau tsis zoo rau ntau pua lab lub xov tooj ntawm tes thoob plaws ntiaj teb. Txawm li cas los xij, muaj tsawg heev nyob rau ntawm qhov yooj yim npaum li cas cov chips no tiag tiag vim yog qhov nyuaj hauv lub cev tsim los ntawm kev nkag mus thiab tshuaj xyuas."
Balmas kuj tau hais tias nws ntseeg tias qhov kev tshawb fawb uas CPR ua yuav ua rau muaj kev vam meej loj hauv kev tshuaj xyuas ntawm modem code, uas cia siab tias yuav tso cai rau cov neeg siv kev nyab xeeb zoo dua yav tom ntej.
Kev tawm tsam ntawm Qualcomm modem chips muaj peev xwm ua rau tsis zoo rau ntau pua lab lub xov tooj ntawm tes thoob plaws ntiaj teb.
Raws li Sijhawm Sijhawm qhia los ntawm CPR, qhov tsis txaus ntseeg tau tshawb pom thiab qhia rau Qualcomm thaum Lub Kaum Hli. Tam sim no nws tau ua ntaub ntawv raws li CVE-2020-11292 ntawm daim ntawv teev npe ntawm Cov Txheej Txheem Tsis Txaus Siab thiab Tshaj Tawm. Txog tam sim no, daim foos no tseem tsis tau hloov kho nrog cov ntaub ntawv tiag tiag txog qhov tsis zoo.
CPR tau hais tias Qualcomm tau kho qhov tsis zoo, tab sis nws yog nyob ntawm tus neeg muag khoom los faib nws, uas tuaj yeem siv sijhawm ntev.
