Cov kws tshawb fawb los ntawm Eset tshiab variant (CVE-2020-3702) ntawm qhov tsis zoo , muaj feem xyuam rau Qualcomm thiab MediaTek wireless chips. Zoo li , uas cuam tshuam rau Cypress thiab Broadcom chips, qhov muaj qhov tsis zoo tshiab tso cai rau koj los txiav txim siab cuam tshuam Wi-nkaus tsheb tiv thaiv siv WPA2 raws tu qauv.
Cia peb nco qab tias Kr00k qhov tsis zoo yog tshwm sim los ntawm kev ua tsis raug ntawm cov yuam sij encryption thaum lub cuab yeej raug txiav (dissociated) los ntawm qhov chaw nkag. Nyob rau hauv thawj version ntawm qhov tsis zoo, thaum tsis sib txuas, qhov kev sib kho qhov tseem ceeb (PTK) khaws cia rau hauv lub cim xeeb tau rov pib dua, vim tias tsis muaj cov ntaub ntawv ntxiv yuav raug xa mus rau qhov kev sib tham tam sim no. Nyob rau hauv cov ntaub ntawv no, cov ntaub ntawv tseem tshuav nyob rau hauv lub kis tau tus mob tsis (TX) tau encrypted nrog ib tug twb tshem tawm qhov tseem ceeb uas muaj tsuas yog xoom thiab, raws li, yuav tau yooj yim decrypted thaum interception. Tus yuam sij khoob tsuas yog siv rau cov ntaub ntawv seem hauv qhov tsis, uas yog ob peb kilobytes loj.
Qhov sib txawv tseem ceeb ntawm qhov thib ob version ntawm qhov tsis zoo, uas tshwm sim hauv Qualcomm thiab MediaTek chips, yog tias tsis yog yuav tsum tau encrypted nrog xoom tus yuam sij, cov ntaub ntawv tom qab dissociation yog kis tsis tau encrypted txhua, txawm tias qhov tseeb tias tus chij encryption tau teeb tsa. Ntawm cov cuab yeej kuaj xyuas qhov tsis zoo raws li Qualcomm chips, D-Link DCH-G020 Smart Home Hub thiab ib lub router qhib tau sau tseg. . Ntawm cov khoom siv raws li MediaTek chips, ASUS RT-AC52U router thiab IoT kev daws teeb meem raws li Microsoft Azure Sphere siv MediaTek MT3620 microcontroller tau sim.
Txhawm rau siv ob hom kev tsis zoo, tus neeg tawm tsam tuaj yeem xa cov kev tswj hwm tshwj xeeb uas ua rau muaj kev sib cais thiab cuam tshuam cov ntaub ntawv xa tom qab. Disassociation feem ntau yog siv nyob rau hauv wireless networks hloov los ntawm ib qho chaw nkag mus rau lwm qhov thaum roaming lossis thaum kev sib txuas lus nrog qhov chaw nkag tam sim no ploj. Disassociation tuaj yeem tshwm sim los ntawm kev xa cov qauv tswj, uas yog kis tsis tau thiab tsis tas yuav muaj kev lees paub (tus neeg tawm tsam tsuas yog xav tau qhov ncav cuag ntawm Wi-Fi teeb liab, tab sis tsis tas yuav txuas nrog lub wireless network). Kev tawm tsam tuaj yeem ua tau ob qho tib si thaum tus neeg siv khoom siv tau yooj yim nkag mus rau qhov chaw nkag tsis tau, thiab thaum lub cuab yeej tsis cuam tshuam nkag mus rau qhov chaw nkag uas pom muaj qhov tsis zoo.
Qhov tsis zoo cuam tshuam rau encryption ntawm qib wireless network thiab tso cai rau koj los tshuaj xyuas tsuas yog kev sib txuas tsis ruaj ntseg tsim los ntawm tus neeg siv (piv txwv li, DNS, HTTP thiab xa ntawv xa mus), tab sis tsis tso cai rau koj los cuam tshuam kev sib txuas nrog encryption ntawm daim ntawv thov (HTTPS, SSH, STARTTLS, DNS dhau TLS, VPN thiab lwm yam). Qhov txaus ntshai ntawm kev tawm tsam kuj txo qis los ntawm qhov tseeb tias ib lub sijhawm tus neeg tawm tsam tsuas tuaj yeem txiav txim siab ob peb kilobytes ntawm cov ntaub ntawv uas nyob rau hauv kev sib kis tsis tau thaum lub sijhawm txiav tawm. Txhawm rau kom ua tiav cov ntaub ntawv tsis pub lwm tus paub xa mus rau qhov kev sib txuas tsis ruaj ntseg, tus neeg tawm tsam yuav tsum paub meej thaum nws raug xa mus, lossis tas li pib qhov kev cuam tshuam los ntawm qhov chaw nkag, uas yuav pom tseeb rau cov neeg siv vim qhov rov ua haujlwm tas li ntawm kev sib txuas wireless.
Qhov teeb meem tau kho nyob rau lub Xya hli ntuj hloov tshiab ntawm cov tswv cuab tsav tsheb rau Qualcomm chips thiab hauv lub Plaub Hlis hloov tshiab ntawm cov tsav tsheb rau MediaTek chips. Kev kho rau MT3620 tau npaj rau lub Xya Hli. Cov kws tshawb nrhiav uas tau txheeb xyuas qhov teeb meem tsis muaj ntaub ntawv hais txog kev suav nrog kev txhim kho hauv tus tsav tsheb dawb ath9k. Txhawm rau kuaj cov khoom siv kom raug rau ob qho tib si qhov tsis zoo hauv Python lus.
Tsis tas li ntawd, nws tuaj yeem raug sau tseg Cov kws tshawb fawb los ntawm Checkpoint tau txheeb xyuas txog rau qhov tsis zoo hauv Qualcomm DSP chips, uas tau siv ntawm 40% ntawm cov xov tooj smartphones, suav nrog cov khoom siv los ntawm Google, Samsung, LG, Xiaomi thiab OnePlus. Cov ntsiab lus hais txog qhov tsis zoo yuav tsis muab kom txog thaum cov teeb meem raug daws los ntawm cov tuam ntxhab. Txij li thaum DSP nti yog "lub thawv dub" uas tsis tuaj yeem tswj tau los ntawm cov chaw tsim khoom smartphone, kev txhim kho yuav siv sijhawm ntev thiab yuav tsum muaj kev sib koom tes nrog DSP chip chaw tsim khoom.
DSP chips yog siv nyob rau hauv niaj hnub smartphones ua hauj lwm xws li suab, duab thiab video ua, nyob rau hauv xam rau augmented kev muaj tiag systems, computer visions thiab tshuab kawm, raws li zoo raws li nyob rau hauv kev siv ceev ceev hom. Ntawm cov kev tawm tsam uas pom tias muaj qhov tsis zoo tso cai tau hais txog: hla kev nkag mus rau kev tswj hwm - tsis muaj kev ntes cov ntaub ntawv xws li duab, yeeb yaj kiab, hu xov tooj, cov ntaub ntawv los ntawm lub microphone, GPS, thiab lwm yam. Kev tsis lees paub kev pabcuam - thaiv kev nkag mus rau txhua cov ntaub ntawv khaws cia. Nkaum siab phem kev ua si - tsim kom pom kiag li thiab unremovable siab phem Cheebtsam.
Tau qhov twg los: opennet.ru