{"id":100142,"date":"2021-05-12T10:22:35","date_gmt":"2021-05-12T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi"},"modified":"2021-05-12T10:22:35","modified_gmt":"2021-05-12T08:22:39","slug":"fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","title":{"rendered":"FragAttacks \u2014 a series of vulnerabilities in Wi-Fi standards and implementations","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mathy Vanhoef, the author of the KRACK attack on wireless networks, has revealed details about 12 vulnerabilities affecting various wireless devices. The identified issues are referred to as FragAttacks and impact nearly all commonly used wireless chips and access points \u2014 out of 75 tested devices, each was found to be vulnerable to at least one of the proposed attack methods. <\/p>\n

The issues are divided into two categories: 3 vulnerabilities are identified in the Wi-Fi standards and affect all devices supporting current IEEE 802.11 standards (the issues date back to 1997). 9 vulnerabilities pertain to errors and shortcomings in specific implementations of wireless stacks. The second category poses a greater danger, as orchestrating attacks on standard shortcomings requires specific configurations or the victim performing certain actions. All vulnerabilities manifest regardless of the security protocols used for Wi-Fi, including those using WPA3. <\/p>\n

Most of the identified attack methods allow an attacker to substitute L2 frames in a protected network, enabling them to intercept the victim's traffic. A particularly realistic attack scenario involves spoofing DNS responses to redirect a user to the attacker's host. There is also an example of using vulnerabilities to bypass the address translator on a wireless router, granting direct access to a device on the local network or ignoring firewall restrictions. The second part of the vulnerabilities, related to the processing of fragmented packets, allows for extracting traffic data over a wireless network and intercepting user data transmitted without encryption. <\/p>\n

The researcher prepared a demonstration showing how vulnerabilities can be exploited to intercept passwords transmitted when accessing a website over unencrypted HTTP. It also demonstrates how to attack a smart socket controlled via Wi-Fi and use it as a launchpad for further attacks on unpatched devices on the local network that have unresolved vulnerabilities (for example, it was possible to attack an unpatched Windows 7 computer on the internal network via NAT bypass).

\r\n \"Play\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

To exploit vulnerabilities, the attacker must be within range of the target wireless device to send the victim a specially crafted frame set. The issues affect both client devices and wireless cards, as well as access points and Wi-Fi routers. Generally, as a workaround, it is sufficient to use HTTPS combined with DNS traffic encryption via DNS over TLS or DNS over HTTPS. Additionally, applying VPN<\/a>. <\/p>\n

The four vulnerabilities in the implementations of wireless devices are considered the most dangerous, allowing trivial methods to achieve the substitution of their unencrypted frames: <\/p>\n