SOHOpelessly Broken 2 point 0

In this presentation at the DEF CON 27 IoT Village, Rick Ramgattie delivers "SOHOpelessly Broken 2.0," an in-depth review of pervasive vulnerabilities discovered across modern Small Office/Home Office (SOHO) routers and Network Attached Storage (NAS) appliances. He begins at 07:00 by examining host header validation flaws and DNS rebinding attacks that permit external attackers to interact directly with local NAS management interfaces through a victim's browser, bypassing standard NAT firewall protections.

At 14:00, Rick audits web administration consoles across vendors such as Buffalo, TerraMaster, and Netgear, showcasing common software design flaws including unauthenticated command execution and broken access controls in default REST APIs. He recounts the coordinated disclosure process at 21:00, detailing the frustrations of uncommunicative vendors, unresponsive security teams, and instances where vendors silently patched CVEs without publishing security advisories or informing researchers.

At 28:00, Rick analyzes SOAP API vulnerabilities, including instances where firmware blindly trusted client-supplied HTTP headers such as X-Forwarded-For to authenticate administrative requests. He explains his methodology for firmware reverse engineering and binary diffing at 35:00 to identify security patches in new updates. He concludes at 42:00 with a critique of persistent security-through-obscurity practices across IoT consumer hardware and advocates for improved firmware signing and automated vulnerability disclosure standards. (AI summary — Gemini Flash)