Sam Quinn - Hacking K-12 School Software in a Time of Remote Learning

Hacking K-12 School Software in a Time of Remote Learning by Sam Quinn Recorded on April 28th, 2021 for the 7th annual BSides Knoxville conference. This talk will take an in-depth look at the zero-day vulnerabilities discovered in a K-12 classroom management solution used in over 9,000 school districts. The focus will be on how four vulnerabilities combined lead to a wormable unauthenticated remote code execution resulting in System privileges. Sam Quinn is a Security Researcher on McAfee's Advanced Threat Research team, focused on finding new vulnerabilities in both software and hardware. Sam has a focus on IOT and embedded devices with knowledge in the fields of reverse engineering and penetration testing.