Skip to main content
Notice removed Draw attention by deviantfan
Bounty Ended with forest's answer chosen by deviantfan
Tweeted twitter.com/StackSecurity/status/1023674725866905602
Notice added Draw attention by deviantfan
Bounty Started worth 50 reputation by deviantfan
added 159 characters in body
Source Link
jnsp
  • 405
  • 2
  • 11

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card as it is connected via PCIe.

What if there is a security vulnerability on the modem firmware running on the card? What is the maximum damage an attacker could possibly do? Can the card access memory of the host system?

Edit: I'm using Linux, and the data sheet says the card will use USB 3.0 on all systems but Windows 10. However, it is still plugged in that PCIe/M.2 slot.

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card as it is connected via PCIe.

What if there is a security vulnerability on the modem firmware running on the card? What is the maximum damage an attacker could possibly do? Can the card access memory of the host system?

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card as it is connected via PCIe.

What if there is a security vulnerability on the modem firmware running on the card? What is the maximum damage an attacker could possibly do? Can the card access memory of the host system?

Edit: I'm using Linux, and the data sheet says the card will use USB 3.0 on all systems but Windows 10. However, it is still plugged in that PCIe/M.2 slot.

Source Link
jnsp
  • 405
  • 2
  • 11

Security of WWAN cards in laptops

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card as it is connected via PCIe.

What if there is a security vulnerability on the modem firmware running on the card? What is the maximum damage an attacker could possibly do? Can the card access memory of the host system?