Finding 0days in Vilo Home Routers

Justin Mott, Ava Petersen

DEF CON 32 Creator Stage · Day 1 · Creator Stage

This talk, presented by Justin Mott and Ava Petersen from Brigham Young University, delves into the process of discovering multiple zero-day vulnerabilities in Vilo home mesh WiFi routers. The research project, undertaken by a team of university students, aimed to apply offensive security skills to a real-world target, specifically a consumer-grade networking device from a relatively new vendor. Their findings highlight significant security deficiencies in these widely available devices, culminating in the discovery of critical unauthenticated remote code execution (RCE) vulnerabilities.

Watch on YouTube