Connect with us

News

Firm Identifies Significant Security Risks in Widely used Cinterion Modems

Published

on

Kindly share this post

Kaspersky ICS CERT researchers have detected critical vulnerabilities in Cinterion cellular modems. The discovery showcases flaws that allow a remote unauthorised attacker to execute arbitrary code, constituting a major threat to millions of industrial devices. Kaspersky experts presented details on these vulnerabilities at OffensiveCon in Berlin, on May 11.

Kaspersky ICS CERT identified severe security vulnerabilities in Cinterion cellular modems, widely deployed in millions of devices and vital to global connectivity infrastructure.

These vulnerabilities include critical flaws that permit remote code execution and unauthorised privilege escalation, posing substantial risks to integral communication networks and IoT devices foundational to industrial, healthcare, automotive, financial and telecommunications sectors.

Among the vulnerabilities detected, the most alarming is CVE-2023-47610, a heap overflow vulnerability within the modem’s SUPL message handlers. This flaw enables remote attackers to execute arbitrary code via SMS, granting them unprecedented access to the modem’s operating system.

This access also facilitates the manipulation of RAM and flash memory, increasing the potential to seize complete control over the modem’s functionalities—all without authentication or requiring physical access to the device.

Further investigations exposed significant security lapses in the handling of MIDlets, Java-based applications running on the modems.

Attackers could compromise the integrity of these applications by circumventing digital signature checks, enabling unauthorised code execution with elevated privileges.

This flaw poses significant risks not only to data confidentiality and integrity, but it also escalates the threat to broader network security and device integrity.

“The vulnerabilities we found, coupled with the widespread deployment of these devices in various sectors, highlight the potential for extensive global disruption. These disturbances range from economic and operational impacts to safety issues.

“Since the modems are typically integrated in a matryoshka-style within other solutions, with products from one vendor stacked atop those from another, compiling a list of affected end products is challenging.

“Affected vendors must undertake extensive efforts to manage risks, with mitigation often feasible only on the telecom operators’ side. We hope that our in-depth analysis will help stakeholders implement urgent security measures and establish a valuable reference point for future cybersecurity research,” says Evgeny Goncharov, head of Kaspersky ICS CERT.

To counter the threat posed by the CVE-2023-47610 vulnerability, Kaspersky recommends the only reliable solution: disabling nonessential SMS messaging capabilities and employing private APNs with strict security settings.

Regarding the other zero-day vulnerabilities registered under CVE-2023-47611 through CVE-2023-47616, Kaspersky advises enforcing rigorous digital signature verification for MIDlets, controlling physical access to devices, and conducting regular security audits and updates.

In response to these discoveries, all findings were proactively shared with the manufacturer prior to public disclosure. Cinterion modems, originally developed by Gemalto, are cornerstone components in machine-to-machine (M2M) and IoT communications, supporting a wide array of applications from industrial automation and vehicle telematics to smart metering and healthcare monitoring.

Gemalto, the initial developer, was subsequently acquired by Thales. In 2023, Telit acquired Thales’ cellular IoT products business, including the Cinterion modems.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

News

Stakeholders Demand Stronger Governance and Infrastructure to Drive Tech Adoption @ Lagos AI Summit

Published

on

Kindly share this post

As AI adoption accelerates across Nigeria, leaders at the “AI in Action Now” conference 2026 have called for a balance between rapid innovation and strict regulatory governance. The event, held at the Lagos Oriental Hotel, highlighted both the doggedness of Nigerian builders and the risks of unregulated data usage.

Dotun Adeoye, Co-Founder of AI Nigeria, raised alarms over “Shadow AI”, a trend where employees upload sensitive official documents to public AI platforms. He praised the Nigerian Data Protection Commission (NDPC) for its recent aggressive stance, including multi-million-dollar fines against major banks and social media brands.

“Innovation without governance is dangerous. The regulator now has the job of educating players. We are working in partnership with them to ensure players don’t just get fined, but actually understand how to protect data locally rather than storing it abroad, ” Adeoye noted.

Addressing issues of lack of infrastructure to carry AI adoption, Conference Convener Debola Ibiyode admitted that while Nigeria lacks the traditional foundation for AI adoption, the tech community cannot afford to wait.

“The simple answer is we don’t have the infrastructure, but Nigeria has never really had infrastructure to drive anything, and we still thrive, ” Iboyode said, encouraging students and builders to look beyond current limitations. “Once we start to build based on what we have now, it will encourage those who need to provide the infrastructure to do their part. The world will not wait for us,” she insisted.

To bridge this gap, she highlighted the AI Foundry Africa, an incubator designed to mentor ideas into market-ready products.

Meanwhile, speaking to journalists on the sidelines, Biodun Ogunleye, the Lagos State Commissioner of Energy and Mineral Resources, echoed the sentiment that the government’s role is to facilitate the right environment through partnership. He emphasized that data generated from interactions with the government must have long-term value.

“We must ensure that in all facets from production to interaction with government, the tools required to ensure data has value are appreciated,” Ogunleye stated.

He concluded that through private-sector collaboration, the government can focus on its primary functions while leveraging AI to ensure the nation aspires for the future.


Kindly share this post
Continue Reading

News

35 Million Nigerians Face Acute Hunger in 2026, UN Warns

Published

on

Kindly share this post

About 35 million Nigerians face acute hunger risks in 2026, including three million children battling severe malnutrition, the United Nations has warned, attributing the crisis to collapsing global aid budgets and escalating violence in the northeast.

35 Million Nigerians Face Acute Hunger in 2026, UN Warns

UN Resident and Humanitarian Coordinator Mohamed Malick Fall disclosed this on Thursday during the launch of the 2026 humanitarian plan in Abuja, noting that the traditional foreign-led aid model proves unsustainable amid Nigeria’s escalating needs.

He highlighted dire conditions in Borno, Adamawa and Yobe states, where over 4,000 people perished in the first eight months of 2025 from surging suicide bombings and attacks—equalling the entire previous year’s toll.

The UN now targets $516 million to deliver lifesaving aid to 2.5 million people this year, a sharp drop from 3.6 million in 2025 and half of prior levels, forcing prioritisation of only the most critical interventions.

Fall stressed, “These are not statistics. These numbers represent lives, futures and Nigerians,” as shortfalls last year compelled the World Food Programme to halt support for over 300,000 children after resources dried up in December.

Yet, Fall acknowledged Nigeria’s increasing national ownership, including local funding for lean-season food assistance and proactive flood early-warning systems, signalling a shift toward self-reliant crisis response.


Kindly share this post
Continue Reading

News

NITDA Commits to Digital Inclusion for Persons with Disabilities

Published

on

Kindly share this post

The National Information Technology Development Agency (NITDA) has reaffirmed its commitment to inclusive digital development following the completion of a two-day digital literacy training for persons with disabilities (PWDs) in Abuja.

The programme, organised under NITDA’s Digital Literacy for All (DL4ALL) initiative, the programme trained 50 participants in practical digital skills to enhance their participation in Nigeria’s expanding digital economy.

In his remarks, the Director-General, Kashifu Inuwa CCIE, stated that the programme reflects the agency’s determination to ensure accessibility remains a core component of national digital transformation efforts.

He explained that genuine digital advancement cannot be realised without the inclusion of persons with disabilities, adding that millions of Nigerians remain constrained by limited access to accessible and inclusive digital platforms.

“In many cases, the problem is not the absence of digital tools but the lack of accessibility. Platforms that do not support assistive technologies, non-captioned content and inaccessible websites effectively shut people out and limit opportunities,” he added.

Inuwa further explained that the initiative aligns with President Bola Ahmed Tinubu’s Renewed Hope Agenda, which prioritises inclusivity as a driver of national development. He stressed that persons with disabilities should be recognised as active contributors to economic growth rather than dependants.

“When equipped with the right skills and technologies, persons with disabilities become innovators, entrepreneurs and professionals who contribute meaningfully across sectors,” he added.

He acknowledged the role of Inclusive Friends Association (IFA) and SIMBED in delivering the training, describing the collaboration as a model of how government and civil society partnerships can advance inclusive development.

Highlighting NITDA’s broader digital literacy drive, the Director-General said the DL4ALL programme is a key component of the agency’s Strategic Roadmap and Action Plan, which targets 70 per cent digital literacy by 2027 and 95 per cent by 2030.

He explained that the initiative operates through three main tracks: an informal sector programme that has trained more than 480,000 Nigerians across 30 states and the Federal Capital Territory since September 2024; an education sector programme focused on embedding digital skills into learning institutions; and a workforce readiness programme designed to strengthen digital competence in both public and private sectors.

“This programme is not merely a pilot. It is proof that inclusive and intentional training works, and that persons with disabilities can excel when given equal opportunities,” Inuwa stated.

Also speaking, the Managing Director and Chief Executive Officer of SIMBED, Mr Daniel Onunkwo, described the training as a significant step towards closing the digital inclusion gap for persons with disabilities.

Onunkwo added that the initiative sends a strong message about equity and national progress, adding that SIMBED remains committed to expanding digital empowerment for persons with disabilities.

Similarly, the Executive Director of Inclusive Friends Association, Grace Jerry, represented by Tracy Agbamu, commended NITDA for demonstrating intentional leadership in promoting inclusion under the Renewed Hope Agenda.

She urged participants to continue applying the skills acquired and to serve as digital inclusion advocates within their communities.

The training programme further strengthens NITDA’s vision of building a digitally inclusive Nigeria where access to digital opportunities is determined not by physical ability but by empowerment and innovation.


Kindly share this post
Continue Reading

Trending