Connect with us

News

Firm Identifies Significant Security Risks in Widely used Cinterion Modems

Published

on

Kindly share this post

Kaspersky ICS CERT researchers have detected critical vulnerabilities in Cinterion cellular modems. The discovery showcases flaws that allow a remote unauthorised attacker to execute arbitrary code, constituting a major threat to millions of industrial devices. Kaspersky experts presented details on these vulnerabilities at OffensiveCon in Berlin, on May 11.

Kaspersky ICS CERT identified severe security vulnerabilities in Cinterion cellular modems, widely deployed in millions of devices and vital to global connectivity infrastructure.

These vulnerabilities include critical flaws that permit remote code execution and unauthorised privilege escalation, posing substantial risks to integral communication networks and IoT devices foundational to industrial, healthcare, automotive, financial and telecommunications sectors.

Among the vulnerabilities detected, the most alarming is CVE-2023-47610, a heap overflow vulnerability within the modem’s SUPL message handlers. This flaw enables remote attackers to execute arbitrary code via SMS, granting them unprecedented access to the modem’s operating system.

This access also facilitates the manipulation of RAM and flash memory, increasing the potential to seize complete control over the modem’s functionalities—all without authentication or requiring physical access to the device.

Further investigations exposed significant security lapses in the handling of MIDlets, Java-based applications running on the modems.

Attackers could compromise the integrity of these applications by circumventing digital signature checks, enabling unauthorised code execution with elevated privileges.

This flaw poses significant risks not only to data confidentiality and integrity, but it also escalates the threat to broader network security and device integrity.

“The vulnerabilities we found, coupled with the widespread deployment of these devices in various sectors, highlight the potential for extensive global disruption. These disturbances range from economic and operational impacts to safety issues.

“Since the modems are typically integrated in a matryoshka-style within other solutions, with products from one vendor stacked atop those from another, compiling a list of affected end products is challenging.

“Affected vendors must undertake extensive efforts to manage risks, with mitigation often feasible only on the telecom operators’ side. We hope that our in-depth analysis will help stakeholders implement urgent security measures and establish a valuable reference point for future cybersecurity research,” says Evgeny Goncharov, head of Kaspersky ICS CERT.

To counter the threat posed by the CVE-2023-47610 vulnerability, Kaspersky recommends the only reliable solution: disabling nonessential SMS messaging capabilities and employing private APNs with strict security settings.

Regarding the other zero-day vulnerabilities registered under CVE-2023-47611 through CVE-2023-47616, Kaspersky advises enforcing rigorous digital signature verification for MIDlets, controlling physical access to devices, and conducting regular security audits and updates.

In response to these discoveries, all findings were proactively shared with the manufacturer prior to public disclosure. Cinterion modems, originally developed by Gemalto, are cornerstone components in machine-to-machine (M2M) and IoT communications, supporting a wide array of applications from industrial automation and vehicle telematics to smart metering and healthcare monitoring.

Gemalto, the initial developer, was subsequently acquired by Thales. In 2023, Telit acquired Thales’ cellular IoT products business, including the Cinterion modems.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

News

Stakeholders Say AgriTech, Open Data, Critical to Nigeria’s Digital Economy

Published

on

Kindly share this post

Stakeholders in the Information and Communication Technology (ICT) sector have identified agricultural technology (AgriTech) and open data platforms as essential tools for advancing Nigeria’s digital economy, particularly in promoting inclusion and improving rural development.

Speaking at the session titled “Design Workshops Building Productive Sectors: Investing in the Digital Economy” during the 31st Nigerian Economic Summit (NESG) in Abuja,

Toluwaleke Adenmosun, senior partner at Verraki, said agriculture offers an opportunity for digital transformation.

“Some groups proposed open data platforms to improve the sourcing of agricultural commodities, while others emphasized the use of AgriTech to simplify and formalize the agricultural value chain,” she said.

Adenmosun also raised concerns about the lack of transparency in tax and levy structures affecting businesses. She called for digital tools to streamline compliance.

“Industry players face challenges not only with formal taxes but also with various levies and charges. A simple platform that outlines required payments and confirms when they are made can be implemented quickly and would address this,” she said.

She added that successful implementation requires clear leadership, whether from the public or private sector.

“It’s not solely a government responsibility. Someone must take ownership, drive execution, and raise awareness among farmers and stakeholders,” she said.

Participants also noted the need for awareness campaigns, as many farmers remain unaware of digital tools that can boost productivity and improve market access.

Olabode Ojo, vice president of Global Independent Connect Limited (GICL), a subsidiary of IHS Towers Nigeria, reaffirmed the company’s commitment to expanding digital infrastructure in underserved areas.

“At GICL and IHS, our goal is to provide the infrastructure to support Nigeria’s digital economy,” said Ojo.

He noted that the company has deployed over 600 rural connectivity sites across 26 states and installed more than 16,000 kilometers of fiber optic cables, supporting mobile technologies such as 2G, 3G, and 4G.

“People in these areas now have access to education, healthcare, and digital financial services,” he said. “This supports broader development.”

Ojo also referenced government plans led by the Federal Ministry of Communications, Innovation and Digital Economy to deploy 90,000 kilometers of fiber optic infrastructure and establish 7,000 rural telephony sites.

“These plans are ambitious but achievable,” he said. “We are ready to collaborate with the government to help make them a reality.”

While agriculture is not GICL’s core focus, Ojo acknowledged its role in the digital economy and the importance of infrastructure in enabling farmers’ access to data.

“These goals are within reach with collaboration from all stakeholders,” he said. “We must stay focused and work together to achieve them.”

With continued investment from both public and private sectors, stakeholders agreed that AgriTech, open data, and rural connectivity are vital to building a more inclusive digital economy in Nigeria.


Kindly share this post
Continue Reading

News

Yakubu Steps Down, Agbamuche-Mbu Takes Over INEC Leadership

Published

on

Kindly share this post

May Agbamuche-Mbu, a National Commissioner at the Independent National Electoral Commission (INEC), has assumed office as the acting Chairman of the Commission following the formal handover by Professor Mahmood Yakubu, who is proceeding on terminal leave.

The transition was announced during a stakeholders’ meeting with Resident Electoral Commissioners held on Tuesday at the INEC headquarters in Abuja.

Speaking at the meeting, Yakubu explained that he was stepping down in accordance with Section 306, Subsections 1 and 2 of the 1999 Constitution (as amended), having served the Commission for nearly a decade.

“In recognition of the significant challenges ahead, and having had the honour of serving the Commission for the past 10 years, with only a few weeks remaining in my tenure, I have made a decision,” Yakubu said.

“In the interim, I am handing over to one of the most senior national commissioners by date of appointment. Following consultation with other national commissioners, May Agbamuche-Mbu will serve in an acting capacity pending the appointment of a substantive chairman of the Commission.”

He expressed hope that the transition would afford the appointing authorities adequate time to name a new chairman and allow the incoming leadership to settle quickly into the task of conducting elections and electoral activities in what he described as Africa’s most demographically and logistically complex environment.

Reflecting on his tenure, Yakubu noted that since 2015, he had worked with 24 national commissioners and 67 resident electoral commissioners, as well as thousands of staff across the country.

He expressed deep appreciation for their support and acknowledged the contributions of civil society groups, development partners, and Nigerians at large.

He also praised members of the National Youth Service Corps, calling them “among the most educated, most patriotic, and most knowledgeable election officials I have worked with.”

“Above all, I thank Nigerians for their comments as well as criticisms, which encouraged rather than discouraged us to persevere,” he added.

As part of his farewell, Yakubu presented two publications documenting the Commission’s work during his tenure: Election Management in Nigeria 2015–2025 and Innovations in Electoral Technology 2015–2025.

He concluded his remarks with a prayer for the continued progress of Nigeria’s democracy.

“It is now my pleasure to sign my official handing over notes and present the same to Agbamuche-Mbu. And from that point, I will take my exit,” he said.

Before stepping down, Yakubu outlined INEC’s preparations for several upcoming elections, including the Anambra State governorship election next month, the Area Council election in the Federal Capital Territory in February 2026, the Ekiti State governorship election in June 2026, and the Osun governorship election in August 2026.

He also confirmed that INEC had already begun preparations for the 2027 general elections, while awaiting the passage of a new Electoral Act currently before the National Assembly.

Yakubu highlighted the need to further clean up the voters’ register, review polling unit locations, and manage party primaries effectively.

He acknowledged the logistical challenges of election management in Nigeria, citing insecurity, natural disasters such as floods, and the need to update frameworks for internally displaced persons’ voting.

He also listed several innovations introduced under his leadership, including the consolidation of the biometric register of voters, the digitization of manual processes, technologies for locating election facilities, virtual training platforms, systems for managing political party finances, and the Election Monitoring and Support Centre.

“Indeed, we have made tremendous progress, but a lot more needs to be done,” he said.

Born in May 1962, Yakubu previously served as Executive Secretary of the Education Trust Fund before his appointment as INEC Chairman by former President Muhammadu Buhari on October 21, 2015.

He assumed office on November 9, 2015, succeeding Professor Attahiru Jega. In 2020, he was reappointed for a second five-year term, becoming the first INEC chairman in Nigeria’s democratic history to be reappointed and confirmed by the Senate.


Kindly share this post
Continue Reading

News

PalmPay Honoured as Consumer-Friendly Business of the Year 2025 @ Lagos State Consumer Protection Agency Awards

Published

on

L-r: Mrs Wemimo Jayeoba, Director of Finance and Accounts, LASCOPA; Opara Onyinyechi, Senior Regulatory Compliance Specialist at PalmPay; Adenopo Ridwan Adekunle, Regulatory Liaison Officer, PalmPay; Ezeigbo Ugochi Boniface, Public Relations Officer, PalmPay, at Consumer Service Week and Awards Ceremony on Tuesday, 30th September.
Kindly share this post

PalmPay, Nigeria’s leading digital banking platform, has been recognised with the prestigious Consumer-Friendly Business of the Year 2025 Award at the Lagos State Consumer Protection Agency’s (LASCOPA) annual Consumer Service Week and Awards Ceremony, held on Tuesday, September 30, 2025, at Adeyemi Bero Hall, The Secretariat, Alausa, Ikeja, Lagos.

The event, organised by the Lagos State Consumer Protection Agency (LASCOPA), celebrated businesses and organisations that demonstrate exceptional commitment to consumer rights, service excellence, and customer satisfaction.

PalmPay’s recognition underscores its dedication to delivering secure, reliable, and inclusive financial services to millions of Nigerians. With a focus on transparency, innovation, and customer-centricity, PalmPay continues to empower consumers by offering secure transactions, fraud protection, convenient payment solutions, and exceptional customer support.

Commenting on the award, Opara Onyinyechi, Senior Regulatory Compliance Specialist, PalmPay, said: “We are deeply honoured to receive the Consumer-Friendly Business of the Year Award from LASCOPA.

This recognition reaffirms our commitment to putting our customers at the heart of everything we do. At PalmPay, we will continue to champion trust, accessibility, and innovation in financial services, ensuring that every user experiences safe and seamless banking.”

The Consumer Service Week and Awards are part of a global initiative that highlights the importance of consumer protection and celebrates organisations that prioritise consumer welfare. By honouring PalmPay, LASCOPA have reinforced PalmPay’s role as a trusted partner in Nigeria’s financial ecosystem.

PalmPay is a leading digital banking platform driving financial inclusion and economic empowerment in underserved emerging markets. Through its secure, user-friendly, and inclusive suite of financial services, PalmPay empowers individuals and businesses with tools to manage and grow their money.

PalmPay offers a comprehensive range of products, including mobile payments, savings, and micro-insurance via its app and mobile money agent network.

Since launching in Nigeria in 2019 under a Mobile Money Operator license, the platform has grown to over 35 million app users and processes up to 15 million transactions daily. PalmPay has operations in Nigeria, Ghana, Tanzania, and Bangladesh.


Kindly share this post
Continue Reading

Trending