Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
en:tc_vulnerability_vulnerability_announcement_key_20220907 [2022/09/08 20:35] kylee created |
en:tc_vulnerability_vulnerability_announcement_key_20220907 [2022/09/08 21:50] (current) kylee |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| {{tag>"BioStar 2" "Server" "Security" "Hardening" "Key"}} | {{tag>"BioStar 2" "Server" "Security" "Hardening" "Key"}} | ||
| - | ===== Allegations of BioStar 2 key exposure vulnerability ===== | + | ===== Addressing Vulnerability Claims within BioStar 2 - key exposure ===== |
| \\ | \\ | ||
| - | This article explains the recent allegations of BioStar 2 system having a vulnerability of protecting the system and all sensitive information. | + | This article explains the recent allegations of BioStar 2 having a vulnerability of protecting the system and all sensitive information. |
| \\ \\ | \\ \\ | ||
| There has been a vulnerability reported to Suprema that there is a critical issue where the information that is used to run the system can be decrypted and by this exposed data. \\ | There has been a vulnerability reported to Suprema that there is a critical issue where the information that is used to run the system can be decrypted and by this exposed data. \\ | ||
| Line 18: | Line 18: | ||
| === 2. Although it's not likely to happen, are there any solutions to apply? === | === 2. Although it's not likely to happen, are there any solutions to apply? === | ||
| BioStar 2 provides an option to store keys on a remote location. Please consider to move the keys into a safe location outside of the server that can be accessed. \\ \\ | BioStar 2 provides an option to store keys on a remote location. Please consider to move the keys into a safe location outside of the server that can be accessed. \\ \\ | ||
| - | === 3. Will this issue be not fixed? === | + | === 3. How will Suprema resolve this issue? === |
| Suprema has a plan to enhance security to implement more complicated ways that can protect the system for certain attacks directly made from the physical server itself. Over the course of the 4th quarter of 2022 and 1st quarter of 2023, BioStar 2 will be released with improved security to protect customer's valuable data. | Suprema has a plan to enhance security to implement more complicated ways that can protect the system for certain attacks directly made from the physical server itself. Over the course of the 4th quarter of 2022 and 1st quarter of 2023, BioStar 2 will be released with improved security to protect customer's valuable data. | ||
| \\ \\ \\ \\ | \\ \\ \\ \\ | ||
| - | Although these alleged vulnerabilites are only applicable if the network infrastructure is compromised, Suprema will not stop its effort to make a secure product. | + | Although these alleged vulnerabilites are only applicable if the network infrastructure is compromised, Suprema will not stop its effort to make a secure product. Should you have any questions please contact [[bs2security@suprema.co.kr|bs2security@suprema.co.kr]]. |