Critical GoAhead Flaw Accepts Revoked mTLS Certificates
GoAhead, the embedded web server behind the management pages of routers, printers, firewalls, and industrial controllers, has patched three TLS flaws. They can let revoked client certificates through, accept overlong certificate chains, and expose some encrypted sessions to passive decryption. Sébastien Féry of FoxIO found the issues and published a technical write-up on Monday. The…












