DCSG1 - Hacking the Bridge Remote Code Execution via S 100 ECDIS Portrayal Catalogues - Hoyeon Cho
DEFCONConference · 24:23 · Watch on YouTube
A single line of Lua in an S-100 portrayal catalog enables remote code execution on the ship's ECDIS bridge system because the IHO standard mandates a full, unsandboxed Lua interpreter, not because of a conventional m...