QNX Real Time Operating System is software designed by Blackberry Ltd. Its older version is facing a security flaw. The U.S. drugs regulator and a federal agency informed that flaw could put at risk the medical devices and cars that use the software. It could put at risk the highly secure systems and expose it to attackers.Users were alerted by the U.S. drugs regulator and a federal agency when a Canadian company told that its QNX Real Time Operating System (QNX RTOS) is exposed to a threat. It disclosed that the vulnerability could allow a hacker to execute a code or overflow the server and finally crash and paralyze it.
QNX Real Time Operating System (QNX RTOS) is used automobile industry leaders like Ford Motor, BMW, and Volkswagen to carry out many critical functionalities. Cars’ Advanced Driver Assistance System could also face security threat. However, the software flaw does not threaten the recent versions of QNX Real Time Operating System but may attack the versions dating from 2012 and earlier. Blackberry top official added that to date no user has been affected.
CISA comes under Department of Homeland Security. Blackberry Ltd informed that the agency have not yet recorded any case of active exploitation of the flaw or any adverse events. However, with regards to raised concerns medical equipment manufacturers are assessing systems that could be more vulnerable to attack.
Blackberry has notified the affected customers and has introduced software patches that will look into the matter.