Possible Vulnerability Discovered in SOTI Pocket Controller

[Jerry Raia]

<div class='os_post_top_link'><a href='http://www.geekzone.co.nz/content.asp?ContentId=5620' target='_blank'>http://www.geekzone.co.nz/content.asp?ContentId=5620</a><br /><br /></div><i>"Airscanner Corp, a research and development company working in the mobile security areas have disclosed information of a vulnerability on Pocket Controller 5.0 for Windows Mobile Pocket PC and Smartphones. This vulnerability could allow an attacker to remotely initiate a “Hard Reset” and wipe all data in the main memory of these devices."</i><br /><br />Anybody out there use this? You might want to check this out.

[Kris Kumar]

I have Pocket Controller.

But given the amount of information in the post. I would like to know more before I panic. I mean give a scenario as to how someone would be able reset my device with the vulnerability?

[Kris Kumar]

Looks like this is the link for some official info:

http://www.airscanner.com/security/05080401_pocketcontroller.htm
But the link is down. :-(

[Mike Temporale]

I use it. It's a great tool. I'm not overly worried about this. The chance of someone exploiting it are pretty slim - given the market penetration of Windows Mobile devices and all. ;)

I will keep an eye on this and see if they release a fix.

[clintonfitchdotcom]

I use SOTI as well and I'm not too worried about a vulnerability.

Show me a piece of software that doesn't have a security hole somewhere and I'll show you vaporware... 8O

Regards,

Clinton