Risk: Medium
A senior director at Linux-based Yoggie Pico has played down reports that a recent flaw discovered permits remote code execution. The flaw was discovered by security researcher Cody Brocious, who said that remote code execution was possible by subverting the "ping" function in the Yoggie web interface.
Avi Dardick, Senior Director of Product Management and Support, responded: "This was not remote execution, as the vulnerability requires access from the computer the device is supposed to connect to, to begin with, which requires an SSL handshake, and to begin processing you need to enter the username and password. With this in mind, yes, you could have hacked our Linux, but the exploit was by no means remote."