Kr00k (Wi-Fi) Vulnerability

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Kr00k (Wi-Fi) Vulnerability

jacobd

21 posts

Geek
+1 received by user: 2

#268113 28-Feb-2020 17:46

For those who might not have seen yet: https://www.zdnet.com/article/new-kr00k-vulnerability-lets-attackers-decrypt-wifi-packets/

Huawei notice: https://www.huawei.com/en/psirt/security-notices/huawei-sn-20200228-01-kr00k-en

Hoping the Spark routers might eventually receive a patch if affected.

cyril7

9073 posts

Uber Geek
+1 received by user: 2499

ID Verified

Trusted

Subscriber

#2429011 28-Feb-2020 18:10

Whilst this is concerning it re enforces the fact that tls and ssh based connections are nesseary so if you are still using http or sites that don't support https then time to do so, there is no excuse.

Also WAP3 still seems a little scarce out there.

Cyril

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#2429093 28-Feb-2020 22:01

our device folk are certainly watching the space, i can't comment past there.

it is worth pointing out though that our primary modem for fibre is not a hauwei device.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

gzt

18679 posts

Uber Geek
+1 received by user: 7809

Lifetime subscriber

#2429122 28-Feb-2020 23:37

hio77: it is worth pointing out though that our primary modem for fibre is not a hauwei device.

That could be misleading. The article states all brands using Broadcom & Cyprus chipsets are affected. Ie; not just Huawei.

gzt

18679 posts

Uber Geek
+1 received by user: 7809

Lifetime subscriber

#2429123 28-Feb-2020 23:42

The 'good' news is this affects only WPA2? Ouch.

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#2429158 29-Feb-2020 09:38

gzt:
hio77: it is worth pointing out though that our primary modem for fibre is not a hauwei device.

That could be misleading. The article states all brands using Broadcom & Cyprus chipsets are affected. Ie; not just Huawei.

Only because op called out explicitly huawei.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.