Zebra's Industry Solutions can give your business a competitive advantage by connecting people, assets and data to help you make better decisions.
Scale and energize your retail strategy with a digital backbone that unifies your team, informs priorities and drives results with Zebra's retail technology solutions.
Zebra’s mobile computing, scanning, and printing solutions connect each operational area in your warehouse to give you the agility to realize transformational gains.
Zebra's healthcare technology solutions provide patient identity management, mobile health devices, and business intelligence data to improve efficiency.
Zebra’s manufacturing technology solutions enable manufacturers to become more agile, optimize plant floor performance and embrace market changes.
Zebra's market-leading solutions and products improve customer satisfaction with a lower cost per interaction by keeping service representatives connected with colleagues, customers, management and the tools they use to satisfy customers across the supply chain.
In today's world, the demands on transportation and logistics companies are higher than ever. Dedicated Warehouse, Fleet and Delivery, and Yard and Terminal solutions enable visibility to every aspect of your business and keep operations running flawlessly around the clock.
Zebra's hospitality technology solutions equip your hotel and restaurant staff to deliver superior customer and guest service through inventory tracking and more.
Empower your field workers with purpose-driven mobile technology solutions to help them capture and share critical data in any environment.
Learn how Zebra's public sector technology solutions empower state and local governments to improve efficiency with asset tracking and data capture devices.
Zebra's range of Banking technology solutions enables banks to minimize costs and to increase revenue throughout their branch network. Learn more.
Zebra's range of mobile computers equip your workforce with the devices they need from handhelds and tablets to wearables and vehicle-mounted computers.
Zebra's desktop, mobile, industrial, and portable printers for barcode labels, receipts, RFID tags and cards give you smarter ways to track and manage assets.
Zebra's 1D and 2D corded and cordless barcode scanners anticipate any scanning challenge in a variety of environments, whether retail, healthcare, T&L or manufacturing.
Zebra's extensive range of RAIN RFID readers, antennas, and printers give you consistent and accurate tracking.
Choose Zebra's reliable barcode, RFID and card supplies carefully selected to ensure high performance, print quality, durability and readability.
Zebra's location technologies provide real-time tracking for your organization to better manage and optimize your critical assets and create more efficient workflows.
Zebra's rugged tablets and 2-in-1 laptops are thin and lightweight, yet rugged to work wherever you do on familiar and easy-to-use Windows or Android OS.
With Zebra's family of fixed industrial scanners and machine vision technologies, you can tailor your solutions to your environment and applications.
Zebra’s line of kiosks can meet any self-service or digital signage need, from checking prices and stock on an in-aisle store kiosk to fully-featured kiosks that can be deployed on the wall, counter, desktop or floor in a retail store, hotel, airport check-in gate, physician’s office, local government office and more.
Discover Zebra’s range of accessories from chargers, communication cables to cases to help you customize your mobile device for optimal efficiency.
Zebra's environmental sensors monitor temperature-sensitive products, offering data insights on environmental conditions across industry applications.
Keep labor costs low, your talent happy and your organization compliant. Create an agile operation that can navigate unexpected schedule changes and customer demand to drive sales, satisfy customers and improve your bottom line.
Empower the front line with prioritized task notification and enhanced communication capabilities for easier collaboration and more efficient task execution.
Get full visibility of your inventory and automatically pinpoint leaks across all channels.
Reduce uncertainty when you anticipate market volatility. Predict, plan and stay agile to align inventory with shifting demand.
Drive down costs while driving up employee, security, and network performance with software designed to enhance Zebra's wireless infrastructure and mobile solutions.
Explore Zebra’s printer software to integrate, manage and monitor printers easily, maximizing IT resources and minimizing down time.
Make the most of every stage of your scanning journey from deployment to optimization. Zebra's barcode scanner software lets you keep devices current and adapt them to your business needs for a stronger ROI across the full lifecycle.
RFID development, demonstration and production software and utilities help you build and manage your RFID deployments more efficiently.
RFID development, demonstration and production software and utilities help you build and manage your RFID deployments more efficiently.
Zebra DNA is the industry’s broadest suite of enterprise software that delivers an ideal experience for all during the entire lifetime of every Zebra device.
Advance your digital transformation and execute your strategic plans with the help of the right location and tracking technology.
Boost warehouse and manufacturing operations with Symmetry, an AMR software for fleet management of Autonomous Mobile Robots and streamlined automation workflows.
The Zebra Aurora suite of machine vision software enables users to solve their track-and-trace, vision inspection and industrial automation needs.
Zebra Aurora Focus brings a new level of simplicity to controlling enterprise-wide manufacturing and logistics automation solutions. With this powerful interface, it’s easy to set up, deploy and run Zebra’s Fixed Industrial Scanners and Machine Vision Smart Cameras, eliminating the need for different tools and reducing training and deployment time.
Aurora Imaging Library™, formerly Matrox Imaging Library, machine-vision software development kit (SDK) has a deep collection of tools for image capture, processing, analysis, annotation, display, and archiving. Code-level customization starts here.
Aurora Design Assistant™, formerly Matrox Design Assistant, integrated development environment (IDE) is a flowchart-based platform for building machine vision applications, with templates to speed up development and bring solutions online quicker.
Designed for experienced programmers proficient in vision applications, Aurora Vision Library provides the same sophisticated functionality as our Aurora Vision Studio software but presented in programming language.
Aurora Vision Studio, an image processing software for machine & computer vision engineers, allows quick creation, integration & monitoring of powerful OEM vision applications.
Adding innovative tech is critical to your success, but it can be complex and disruptive. Professional Services help you accelerate adoption, and maximize productivity without affecting your workflows, business processes and finances.
Zebra's Managed Service delivers worry-free device management to ensure ultimate uptime for your Zebra Mobile Computers and Printers via dedicated experts.
Find ways you can contact Zebra Technologies’ Support, including Email and Chat, ask a technical question or initiate a Repair Request.
Zebra's Circular Economy Program helps you manage today’s challenges and plan for tomorrow with smart solutions that are good for your budget and the environment.
The Zebra Knowledge Center provides learning expertise that can be tailored to meet the specific needs of your environment.
Zebra has a wide variety of courses to train you and your staff, ranging from scheduled sessions to remote offerings as well as custom tailored to your specific needs.
Build your reputation with Zebra's certification offerings. Zebra offers a variety of options that can help you progress your career path forward.
Build your reputation with Zebra's certification offerings. Zebra offers a variety of options that can help you progress your career path forward.
You're up next!
Connecting....
END CHAT?
Don't worry, after the chat ends, you can save the transcript. Click the agent name in the header and then click Save Transcript.
Sorry your session has expired due to 30 minutes of inactivity. Please start a new chat to continue.
Chat Ended
The new and improved Support and Downloads pages are now live! You asked, and we listened. Visit the Support and Downloads Experience page to learn more about this update.
BleedingBit Security Vulnerability
For more information, please see:
Zebra is unaware of any active exploits of this vulnerability. However, we recommend concerned customers update software for the two impacted Zebra products to mitigate the risk of exploitation. No additional LifeGuard updates will be made.
BLEEDINGBIT is a security vulnerability that affects Bluetooth® low energy (BLE) chips made by Texas Instruments. It consists of two related remote-control exploit issues:
A memory corruption condition (CVE-2018-16986) that can occur during processing of incorrect network traffic from the BLE module. A malicious actor who is close to the target device could execute arbitrary code by sending malformed data, or execute a DoS (denial-of-service) condition which could shut down the device.
An Over-The-Air Download (OAD) functionality issue (CVE-2018-7080) that can be triggered only when the relevant BLE radio function is enabled by the device owners (it is disabled by default). A malicious actor could push altered copies of these images to gain control of the device.
Affected Products
Only the following two BLE badge products are affected. Zebra mobile devices, handheld devices, barcode scanners and printers are not impacted.
| Zebra Product SKU | Description | Update Available |
|---|---|---|
| GE-MB6000-01-WR | Mobile BLE Badge | January, 2019 |
| GE-MB5000-01-WR | Fixed BLE Badge | January, 2019 |
Only the above Zebra devices are impacted by CVE-2018-16986 only and CVE-2018-7080 does not apply since the OAD feature in the Texas Instruments’ (TI) CC2640 BLE chip is disabled. The Zebra devices have an STMicroelectronics Microcontroller Unit (MCU) and BLE chip CC2640. The MCU firmware is written on CYPRESS WICED SDK. The firmware of the TI CC2640 is based on TI’s BLE SDK 2.1. The MCU connects to the CC2640 via a UART port. The MCU sends BLE HCI commands to the CC2640, the CC2640 does the BLE scanning continuously, and the CC2640 returns the scanned BLE packets in a predefined format to MCU.
During the scanning process, there is possible memory corruption in the CC2640 per CVE-2018-16986. If the CC2640 is exploited, it may send garbage data over the UART port to the MCU. The MCU may or may not discard the data, depending on the data itself. In this manner, the badge could become useless as there is no valid BLE packet data to collect inside the MCU.
If an attacker wants to gain full control of the device the attacker needs to first gain control of the MCU. The attacker would need to find an enabling vulnerability in WICED SDK and the STM MCU as well. The hacker would then need to attack the MCU through the exploited CC2640 chip via the UART port. The possibility of exploiting the MCU (achieved in conjunction with the exploitation of undiscovered vulnerabilities in both the Wicked SDK and the STM MCU) to gain full control over the device is relatively low.
To avoid the potential of this vulnerability, Zebra must port the CC2640 firmware code to the TI BLE SDK 2.2.2. For new device this updated CC2640 firmware code can be used. For deployed devices the updated CC2640 firmware can be updated over-the-air through the MCU where the MCU pushes the new firmware to CC2640 via UART port.
Disclaimer: Zebra makes every attempt to release security updates on or about the time that Google releases its respective security bulletin. However, delivery time of security updates may vary depending on the region, product model, and third party software suppliers. Under some circumstances, the OS must be updated to the latest maintenance release prior to installing the security updates. Individual product updates will provide specific guidance.
Unless otherwise noted, there have been no reports of active customer exploitation or abuse from these newly reported issues.
Are you aware of a potential security issue with a Zebra Technologies product?
LifeGuard for Android
Compliance
Legal Terms of Use Privacy Policy Supply Chain Transparency
ZEBRA and the stylized Zebra head are trademarks of Zebra Technologies Corp., registered in many jurisdictions worldwide. All other trademarks are the property of their respective owners. ©2024 Zebra Technologies Corp. and/or its affiliates.