{"id":71704,"date":"2020-02-27T20:54:05","date_gmt":"2020-02-27T17:54:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik"},"modified":"2020-03-03T16:10:37","modified_gmt":"2020-03-03T13:10:37","slug":"uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","title":{"rendered":"Haavatavus Wi-Fi kiipides Cypress ja Broadcom, mis v\u00f5imaldab liikluse dekr\u00fcpteerimist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Eseti uurijad <noindex><a rel=\"nofollow\" href=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2020\/02\/ESET_Kr00k.pdf\">avaldasid<\/a><\/noindex> k\u00e4ivad praegu toimuval konverentsil <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rsaconference.com\/usa\/agenda\/kr00k-how-kracking-amazon-echo-exposed-a-billion-vulnerable-wifi-devices\">RSA 2020<\/a><\/noindex> teavet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.eset.com\/int\/kr00k\/\">haavatavuse<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-15126\">CVE-2019-15126<\/a><\/noindex>) Cypressi ja Broadcomi traadita kiipides, mis v\u00f5imaldab dekodeerida W-Fi liiklust, mis on kaitstud WPA2 protokolliga. Turvaauk on saanud koodnimeks Kr00k. Probleem m\u00f5jutab FullMAC kiipe (Wi-Fi protokoll, mis on rakendatud kiibi poolel, mitte draiveris), mida kasutatakse laias valikus tarbijaseadmetes, alates tuntud tootjate nutitelefonidest (Apple, Xiaomi, Google, Samsung) kuni nutik\u00f5lariteni (Amazon Echo, Amazon Kindle), plaatideni (Raspberry Pi 3) ja traadita juurdep\u00e4\u00e4supunktideni (Huawei, ASUS, Cisco).<\/p>\n<p>Turvaauk on p\u00f5hjustatud vale\u0161ifreerimise v\u00f5tmete k\u00e4sitlemisest lahti\u00fchendamise ajal (<noindex><a rel=\"nofollow\" href=\"https:\/\/community.cisco.com\/t5\/wireless-mobility-documents\/802-11-association-status-802-11-deauth-reason-codes\/ta-p\/3148055\">diskonekteerimise<\/a><\/noindex>) seadme \u00fchenduspunktilt. Lahti\u00fchendamisel nullitakse kiibi m\u00e4llu salvestatud seansiv\u00f5ti (PTK), kuna edasine andmeedastus k\u00e4esolevas seansis ei toimuzu. Turvaauku olemus seisneb selles, et edastuspuudelt (TX) j\u00e4\u00e4nud andmed on \u0161ifreeritud juba nullitud v\u00f5tmega, mis koosneb ainult nullidest ja seega v\u00f5ib neid h\u00f5lpsasti dekodeerida, kui need on kinni p\u00fc\u00fcdetud. T\u00fchja v\u00f5tit rakendatakse ainult \u00fclej\u00e4\u00e4nud andmetele puhvrisse, mille suurus on mitu kilobaiti. <\/p>\n<p>Seega tugineb r\u00fcnnak teatud kaadriste kunstlikule saatmisele, mis p\u00f5hjustab diskonekteerimise, ja j\u00e4rgneva edastatud andmete kinni p\u00fc\u00fcdmisel. Diskonekteerimist rakendatakse tavaliselt traadita v\u00f5rkudes, et liikuda \u00fchest juurdep\u00e4\u00e4supunktist teise r\u00e4ndamise ajal v\u00f5i praeguse juurdep\u00e4\u00e4supunktiga \u00fchenduse kadumise korral. Diskonekteerimist saab esile kutsuda juhtiva kaadri saatmisega, mis edastatakse \u0161ifreerimata ja ei vaja autentimist (r\u00fcnnakuks on piisav W-Fi signaali k\u00e4tte saamine, kuid mitte \u00fchenduse loomine traadita v\u00f5rguga). R\u00fcnnakut on testitud ainult WPA2 protokolli kasutades, WPA3 r\u00fcnnakuv\u00f5imalusi ei ole kontrollitud.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2020\/02\/ESET_Kr00k.pdf\"><img decoding=\"async\" alt=\"Haavatavus Wi-Fi kiipides Cypress ja Broadcom, mis v\u00f5imaldab liikluse dekr\u00fcpteerimist\" src=\"\/wp-content\/uploads\/2020\/02\/164a8d4e32d6591de3d4938ec4dc2d30.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Esialgsete hinnangute kohaselt v\u00f5ib see haavatavus m\u00f5jutada miljardeid igap\u00e4evaelus kasutatavaid seadmeid. Qualcommi, Realteki, Ralink'i ja Mediateki kiipidega seadmetes probleem ei avaldu. Samas on andmete dekodeerimine v\u00f5imalik nii siis, kui haavatav seadme klient \u00fchendub probleemideta juurdep\u00e4\u00e4supunktiga, kui ka juhul, kui probleemist k\u00f5rvale j\u00e4\u00e4v seade \u00fchendub juurdep\u00e4\u00e4supunktiga, kus haavatavus ilmneb. Paljud tarbeseadmete tootjad on juba v\u00e4lja andnud uued tarkvarav\u00e4rskendused haavatavuse k\u00f5rvaldamiseks (n\u00e4iteks Apple <noindex><a rel=\"nofollow\" href=\"https:\/\/support.apple.com\/en-us\/HT210721\">lahendas<\/a><\/noindex> haavatavuse juba eelmise aasta oktoobris). <\/p>\n<p>Tuleb m\u00e4rkida, et haavatavus m\u00f5jutab traadita v\u00f5rgu taseme kr\u00fcptimist ja v\u00f5imaldab anal\u00fc\u00fcsida ainult kasutaja m\u00e4\u00e4ratud kaitsetud \u00fchendusi, kuid ei v\u00f5imalda kompromiteerida rakenduse taseme kr\u00fcptimisega seotud \u00fchendusi (HTTPS, SSH, STARTTLS, DNS over TLS, VPN jne). R\u00fcnnaku ohtu v\u00e4hendab ka asjaolu, et r\u00fcndaja v\u00f5ib korraga dekodeerida vaid m\u00f5ni kilobaidiga andmeid, mis olid \u00fchenduse katkestamise hetkel edastamise puhvris. Konfidetsiaalsete andmete edukaks haaramiseks kaitsmata \u00fchenduse kaudu peab r\u00fcndaja kas t\u00e4pselt teadma nende edastamise hetke v\u00f5i pidevalt katsetama lose juurdep\u00e4\u00e4supunktiga katkestamist, mis j\u00e4\u00e4b kasutajale silma pidevate traadita \u00fchenduse taask\u00e4ivituste t\u00f5ttu.<\/p>\n<p>M\u00f5ned seadmed, mida Eset testis r\u00fcnnaku v\u00f5imaluse suhtes:<\/p>\n<ul>\n<li> Amazon Echo 2. p\u00f5lvkond\n<li> Amazon Kindle 8. p\u00f5lvkond\n<li> Apple iPad mini 2\n<li> Apple iPhone 6, 6S, 8, XR\n<li> Apple MacBook Air Retina 13-tolline 2018\n<li> Google Nexus 5\n<li> Google Nexus 6\n<li> Google Nexus 6S\n<li> Raspberry Pi 3\n<li> Samsung Galaxy S4 GT-I9505\n<li> Samsung Galaxy S8\n<li> Xiaomi Redmi 3S\n<li> Traadita ruuteri mudelid ASUS RT-N12, Huawei B612S-25d, Huawei EchoLife HG8245H, Huawei E5577Cs-321\n<li> <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20200226-wi-fi-info-disclosure\">Cisco juurdep\u00e4\u00e4supunktid<\/a><\/noindex>\n<\/ul>\n<p><center><br \/>\n<div class=\"youtube-placeholder\" data-id=\"_40E6WRMRyE\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/_40E6WRMRyE\/hqdefault.jpg\" alt=\"M\u00e4ngi videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52441\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RSA 2020 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-15126) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0439 Wi-Fi \u0442\u0440\u0430\u0444\u0438\u043a, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Kr00k. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0438\u043f\u044b FullMAC (Wi-Fi \u0441\u0442\u0435\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0447\u0438\u043f\u0430, \u0430 \u043d\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71705,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71704","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-27T17:54:05+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:10:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavus Wi-Fi kiipides Cypress ja Broadcom, mis v\u00f5imaldab dekodeerida andmevoogu | ProHoster","description":"Eseti teadlased avalikustasid k\u00e4imasoleval konverentsil","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T17:54:05+00:00","article:modified_time":"2020-03-03T13:10:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71704","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:57:37","updated":"2022-10-01 10:33:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/71704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=71704"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/71704\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/71705"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=71704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=71704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=71704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}