{"id":71704,"date":"2020-02-27T20:54:05","date_gmt":"2020-02-27T17:54:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik"},"modified":"2020-03-03T16:10:37","modified_gmt":"2020-03-03T13:10:37","slug":"uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","title":{"rendered":"Wi-Fi kiipide Cypressi ja Broadcomi haavatavus, mis v\u00f5imaldab liikluse dekr\u00fcpteerimist.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Eseti teadlased <noindex><a rel=\"nofollow\" href=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2020\/02\/ESET_Kr00k.pdf\">avalikustas<\/a><\/noindex> k\u00e4imasoleval konverentsil <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rsaconference.com\/usa\/agenda\/kr00k-how-kracking-amazon-echo-exposed-a-billion-vulnerable-wifi-devices\">RSA 2020<\/a><\/noindex> teave <noindex><a rel=\"nofollow\" href=\"https:\/\/www.eset.com\/int\/kr00k\/\">haavatavusest<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-15126\">CVE-2019-15126<\/a><\/noindex>) Cypressi ja Broadcomi traadita kiipides, mis v\u00f5imaldab dekr\u00fcpteerida p\u00fc\u00fcdnud Wi-Fi liiklust, mis on kaitstud WPA2 protokolliga. Haavatavusele on antud koodnimi Kr00k. Probleem h\u00f5lmab FullMAC kiipe (Wi-Fi kiht on rakendatud kiibi, mitte draiveri poolel), mida kasutatakse laias valikus tarbija seadmetes, alates tuntud tootjate nutitelefonidest (Apple, Xiaomi, Google, Samsung) kuni nutik\u00f5lariteni (Amazon Echo, Amazon Kindle), plaadid (Raspberry Pi 3) ning traadita p\u00e4\u00e4supunktideni (Huawei, ASUS, Cisco).<\/p>\n<p>Haavatavus tuleneb vale kr\u00fcpteerimisv\u00f5tmete t\u00f6\u00f6tlemisest seadme lahti\u00fchendamisel (<noindex><a rel=\"nofollow\" href=\"https:\/\/community.cisco.com\/t5\/wireless-mobility-documents\/802-11-association-status-802-11-deauth-reason-codes\/ta-p\/3148055\">disassotsieerimine<\/a><\/noindex>) juurdep\u00e4\u00e4supunktist. Lahti\u00fchendamisel l\u00e4htestatakse kiibi m\u00e4lus hoitud seansi v\u00f5ti (PTK), kuna edasine andmete saatmine praeguses seansis ei toimu. Probleemi olemus seisneb selles, et edastamisest (TX) j\u00e4\u00e4nud andmed kr\u00fcpteeritakse juba l\u00e4htestatud v\u00f5tmega, mis koosneb ainult nullidest, ja seega saab neid kergesti dekr\u00fcpteerida, kui need on p\u00fc\u00fcdnud. T\u00fchja v\u00f5tit rakendatakse ainult andmetele, mis j\u00e4\u00e4vad m\u00e4llu, mille suurus on m\u00f5ni kilobait. <\/p>\n<p>Seega p\u00f5hineb r\u00fcnnak kunstlikul teatud kaadrite saatmisel, mis p\u00f5hjustab disassotsieerimise, ja j\u00e4rgneva edastamise andmete p\u00fc\u00fcdmisel. Disassotsieerimist kasutatakse tavaliselt traadita v\u00f5rkudes, et vahetada \u00fchte juurdep\u00e4\u00e4supunkti teise, kui r\u00e4ndamine toimub v\u00f5i kui \u00fchendus praeguse juurdep\u00e4\u00e4supunktiga kaob. Disassotsieerimist saab esile kutsuda juhtkaadri saatmisega, mis edastatakse kr\u00fcpteerimata kujul ja ei n\u00f5ua autentimist (r\u00fcnnata on piisav Wi-Fi signaali ulatusest, kuid \u00fchenduse loomine traadita v\u00f5rku ei ole vajalik). R\u00fcnnakut testiti ainult WPA2 protokolli kasutamisel, r\u00fcnnaku v\u00f5imalust WPA3 vastu ei kontrollitud.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2020\/02\/ESET_Kr00k.pdf\"><img decoding=\"async\" alt=\"Wi-Fi kiipide Cypressi ja Broadcomi haavatavus, mis v\u00f5imaldab liikluse dekr\u00fcpteerimist.\" src=\"\/wp-content\/uploads\/2020\/02\/164a8d4e32d6591de3d4938ec4dc2d30.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Esialgse hinnangu kohaselt v\u00f5ib haavatavus potentsiaalselt m\u00f5jutada miljoneid igap\u00e4evaselt kasutatavaid seadmeid. Qualcommi, Realtek, Ralink ja Mediatek kiipidega seadmetel probleem ei avaldu. Sellegipoolest on liikluse dekr\u00fcpteerimine v\u00f5imalik nii siis, kui haavatav klientseade p\u00f6\u00f6rdub probleemideta juurdep\u00e4\u00e4supunkti poole, kui ka juhul, kui probleemist mittepuutuv seade p\u00f6\u00f6rdub juurdep\u00e4\u00e4supunkti poole, kus haavatavus esineb. Paljud tarbija seadmete tootjad on juba v\u00e4lja andnud uuenduse, et lahendada see haavatavus (nt Apple <noindex><a rel=\"nofollow\" href=\"https:\/\/support.apple.com\/en-us\/HT210721\">lahendas<\/a><\/noindex> haavatavuse juba mullu oktoobris). <\/p>\n<p>Oluline on m\u00e4rkida, et haavatavus m\u00f5jutab traadita v\u00f5rgu taseme kr\u00fcpteerimist ja v\u00f5imaldab anal\u00fc\u00fcsida vaid kasutaja poolt loodud kaitsmata \u00fchendusi, kuid ei anna v\u00f5imalust kompromiteerida rakenduse taseme \u00fchendusi (HTTPS, SSH, STARTTLS, DNS over TLS, VPN jne). R\u00fcnnaku oht v\u00e4hendab ka see, et samal ajal saab r\u00fcndaja dekr\u00fcpteerida vaid m\u00f5ned kilobait andmeid, mis viibimise ajal lahti\u00fchendamisel muutusid edastamises aktiivseks. Nende konfidentsiaalsete andmete p\u00fc\u00fcdmiseks, mis edastatakse kaitsmata \u00fchenduse kaudu, peab r\u00fcndaja kas t\u00e4pselt teadma, millal nende saatmine toimub, v\u00f5i pidevalt algatama lahti\u00fchendamist juurdep\u00e4\u00e4supunktist, mis t\u00f5mbab kasutaja t\u00e4helepanu pidevate traadita \u00fchenduse taask\u00e4ivitustega.<\/p>\n<p>M\u00f5ned seadmed, mida Eset testis r\u00fcnnaku v\u00f5imaluse osas:<\/p>\n<ul>\n<li> Amazon Echo 2. p\u00f5lvkond\n<li> Amazon Kindle 8. p\u00f5lvkond\n<li> Apple iPad mini 2\n<li> Apple iPhone 6, 6S, 8, XR\n<li> Apple MacBook Air Retina 13-tolline 2018\n<li> Google Nexus 5\n<li> Google Nexus 6\n<li> Google Nexus 6S\n<li> Raspberry Pi 3\n<li> Samsung Galaxy S4 GT-I9505\n<li> Samsung Galaxy S8\n<li> Xiaomi Redmi 3S\n<li> Traadita ruuterid ASUS RT-N12, Huawei B612S-25d, Huawei EchoLife HG8245H, Huawei E5577Cs-321\n<li> <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20200226-wi-fi-info-disclosure\">Cisco juurdep\u00e4\u00e4supunktid<\/a><\/noindex>\n<\/ul>\n<p><center><br \/>\n<div class=\"youtube-placeholder\" data-id=\"_40E6WRMRyE\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/_40E6WRMRyE\/hqdefault.jpg\" alt=\"Vaata videot\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52441\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RSA 2020 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-15126) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0439 Wi-Fi \u0442\u0440\u0430\u0444\u0438\u043a, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Kr00k. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0438\u043f\u044b FullMAC (Wi-Fi \u0441\u0442\u0435\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0447\u0438\u043f\u0430, \u0430 \u043d\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71705,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71704","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-27T17:54:05+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:10:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Haavatavus Cypressi ja Broadcomi Wi-Fi kiipides, mis v\u00f5imaldab liikluse dekr\u00fcpteerimist | ProHoster","description":"Eseti teadlased avaldasid sel n\u00e4dalal toimuval konverentsil","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T17:54:05+00:00","article:modified_time":"2020-03-03T13:10:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71704","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:57:37","updated":"2022-10-01 10:33:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/71704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=71704"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/71704\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/71705"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=71704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=71704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=71704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}