Komori
Other Disclosures3858Ubiquitous AI CorporationInformation and Communications, Services and Others

Security vulnerability testing tool “Penzzer,” sold by ユビキタスAI, discovers previously unknown information disclosure vulnerability, raising an alert for IoT and industrial equipment monitoring platforms

We-Fuzz discovered “MIBleed,” a vulnerability allowing information disclosure without authentication in the SNMP agent “mini-snmpd 2.0 and earlier,” using its security testing tool “Penzzer.” The developer has released the fixed version “mini-snmpd 2.1” and recommends that users update.

Worth reading
62In focus
0–100. This measures how worthwhile something is to read, not how good or bad the company is.
Direction
Mixed performance
Direction inferred from the company’s description.
Scale
2048
Bytes (maximum amount leaked from the SNMP buffer)
Wording
Conditional
How definitive the wording is.

Announced details

Penzzermini-snmpd
Applicable field (uses covered by this announcement)
IoT equipmentEmbedded SystemsManufacturingMedical devicesAutomotiveWireless infrastructureIndustrial systems
What the company reported numerically
Quantitative Effects

The maximum leakage is 2,048 bytes from within the SNMP buffer.

Relationship between the counterparty and the company
Ubiquitous AI Corporation3858
Relationship with the Company

We-Fuzz Inc. developed Penzzer, while ユビキタスAI provides the product in Japan and uses it in its IoT device security testing services.

CounterpartyWe-Fuzz Inc.

A U.S. cybersecurity company established in 2025 that specializes in security testing for IoT, automotive, medical and industrial systems.

Registration number and expiry date

CVE number pending application

Location (as indicated in this announcement)

ユビキタスAI: 17F Shinjuku First West, 1-23-7 Nishi-Shinjuku, Shinjuku-ku, Tokyo

Impact on Business Performance

This news release announces qualitative business progress and directs readers to earnings summaries and other materials for progress and forecasts relating to business performance and management indicators. No specific financial impact is stated.

The company does not address Contract Value / Offering price.

Announced details
ItemDetails
Names of Products / Services CoveredPenzzer, mini-snmpd
CounterpartyWe-Fuzz Inc.
Counterparty overviewA U.S. cybersecurity company established in 2025 that specializes in security testing for IoT, automotive, medical and industrial systems.
Relationship with the CompanyWe-Fuzz Inc. developed Penzzer, while ユビキタスAI provides the product in Japan and uses it in its IoT device security testing services.
Applicable areaIoT equipment, Embedded Systems, Manufacturing, Medical devices, Automotive, Wireless infrastructure, Industrial systems
Registration number and expiry dateCVE number pending application
LocationユビキタスAI: 17F Shinjuku First West, 1-23-7 Nishi-Shinjuku, Shinjuku-ku, Tokyo
Quantitative EffectsThe maximum leakage is 2,048 bytes from within the SNMP buffer.
Impact on Business PerformanceThis news release announces qualitative business progress and directs readers to earnings summaries and other materials for progress and forecasts relating to business performance and management indicators. No specific financial impact is stated.
Items this document does not state (9)
Contract ValueOffering priceContract DateLaunch dateAward/certification nameAwarding / certifying bodyLocation scaleUsage historySource

These are items the company does not state in this document. We do not leave them blank, nor fill them in from other sources or by inference.

The reasons the company gives

The company's own explanation, not something inferred from the numbers.

Penzzer uses fuzzing technology to rapidly and comprehensively generate and inject input patterns involving boundary values and abnormal cases that are permissible under the specifications but unlikely to be anticipated in implementation. It detected a vulnerability that would be difficult to find through conventional testing.

How to read this page

This is not the documentKomori reads the disclosure the company filed and writes this summary. Figures are as stated by the company and are not audited.
Weight is not a verdictIt measures how much this changes what the company had already told the market. It is not a view on the shares.
Corrections happenIf the company reissues this disclosure, the page is rebuilt from the corrected version and the revision number moves up.
Security vulnerability testing tool “Penzzer,” sold by ユビキタスAI, discovers previously unknown information disclosure vulnerability, raising an alert for IoT and industrial equipment monitoring platforms | Ubiquitous AI Corporation (3858) timely disclosure | Komori