{"id":71704,"date":"2020-02-27T20:54:05","date_gmt":"2020-02-27T17:54:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik"},"modified":"2020-03-03T16:10:37","modified_gmt":"2020-03-03T13:10:37","slug":"uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","title":{"rendered":"Vulnerability in Cypress and Broadcom Wi-Fi chips allows for decrypting traffic.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Researchers from Eset revealed<\/a><\/noindex> at the ongoing conference RSA 2020<\/a><\/noindex> information about a vulnerability<\/a><\/noindex> (CVE-2019-15126<\/a><\/noindex>) in wireless chips from Cypress and Broadcom, allowing for the decryption of intercepted Wi-Fi traffic protected by the WPA2 protocol. The vulnerability is codenamed Kr00k. This issue affects FullMAC chips (where the Wi-Fi stack is implemented on the chip side rather than the driver) used in a wide range of consumer devices, from well-known smartphone manufacturers (Apple, Xiaomi, Google, Samsung) to smart speakers (Amazon Echo, Amazon Kindle), boards (Raspberry Pi 3), and wireless access points (Huawei, ASUS, Cisco).<\/p>\n

The vulnerability is caused by improper handling of encryption keys during disconnection (disassociation<\/a><\/noindex>) of the device from the access point. Upon disconnection, the session key (PTK) stored in the chip's memory is reset, as no further data will be sent in the current session. The essence of the vulnerability is that data remaining in the transmission buffer (TX) is encrypted using the already cleared key, which consists solely of zeros and can therefore be easily decrypted if intercepted. The empty key is applied only to residual data in the buffer, which is several kilobytes in size. <\/p>\n

Thus, the attack is based on artificially sending specific frames that trigger disassociation and intercepting the subsequently sent data. Disassociation is typically used in wireless networks for switching from one access point to another during roaming or when the connection with the current access point is lost. Disassociation can be triggered by sending a control frame, which is transmitted in an unencrypted form and does not require authentication (the attacker only needs to have access to the Wi-Fi signal but does not need to be connected to the wireless network). The attack has only been tested using the WPA2 protocol; the possibility of executing the attack on WPA3 has not been verified.<\/p>\n

\"Vulnerability<\/a><\/noindex><\/center><\/p>\n

According to preliminary estimates, the vulnerability may potentially affect billions of widely used devices. The issue does not manifest on devices with Qualcomm, Realtek, Ralink, and Mediatek chips. Traffic decryption is possible when a vulnerable client device connects to a problem-free access point, as well as when a non-vulnerable device connects to an access point exhibiting the vulnerability. Many consumer device manufacturers have already released firmware updates addressing the vulnerability (for instance, Apple addressed<\/a><\/noindex> the vulnerability back in October of last year). <\/p>\n

It is important to note that the vulnerability affects encryption at the wireless network level and only allows for the analysis of user-established unencrypted connections, but does not compromise connections with application-level encryption (HTTPS, SSH, STARTTLS, DNS over TLS, VPN, etc.). The risk of an attack is further diminished by the fact that an attacker can only decrypt a few kilobytes of data that were in the transmission buffer at the time of disconnection. For successful interception of confidential data sent over an unencrypted connection, the attacker must either know the exact timing of data transmission or repeatedly initiate disconnections from the access point, which would be noticeable to the user due to constant wireless connection restarts.<\/p>\n

Some of the devices tested by Eset for attack vulnerability include:<\/p>\n