{"id":100142,"date":"2021-05-12T10:22:35","date_gmt":"2021-05-12T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi"},"modified":"2021-05-12T10:22:35","modified_gmt":"2021-05-12T08:22:39","slug":"fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/fragattacks-seriya-uyazvimostej-standartah-i-realizacziyah-wi-fi","title":{"rendered":"FragAttacks \u2014 s\u00e9ria sebezhet\u0151s\u00e9gek a Wi-Fi szabv\u00e1nyokban \u00e9s megval\u00f3s\u00edt\u00e1sokban","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mathy Vanhoef, a researcher behind the KRACK attack on wireless networks, revealed information about 12 vulnerabilities affecting various wireless devices. The identified issues are referred to by the code name FragAttacks and encompass nearly all commonly used wireless chips and access points \u2014 of the 75 tested devices, each was susceptible to at least one of the proposed attack methods. <\/p>\n

A probl\u00e9m\u00e1k k\u00e9t kateg\u00f3ri\u00e1ba sorolhat\u00f3k: 3 sebezhet\u0151s\u00e9g k\u00f6zvetlen\u00fcl a Wi-Fi szabv\u00e1nyokban tal\u00e1lhat\u00f3, \u00e9s \u00e9rinti az \u00f6sszes olyan eszk\u00f6zt, amely t\u00e1mogatja az aktu\u00e1lis IEEE 802.11 szabv\u00e1nyokat (a probl\u00e9m\u00e1k 1997 \u00f3ta fenn\u00e1llnak). 9 sebezhet\u0151s\u00e9g a vezet\u00e9k n\u00e9lk\u00fcli verem konkr\u00e9t megval\u00f3s\u00edt\u00e1saiban tal\u00e1lhat\u00f3 hib\u00e1khoz \u00e9s hi\u00e1nyoss\u00e1gokhoz kapcsol\u00f3dik. A m\u00e1sodik kateg\u00f3ria jelentheti a legnagyobb vesz\u00e9lyt, mivel a szabv\u00e1nyok hi\u00e1nyoss\u00e1gaira ir\u00e1nyul\u00f3 t\u00e1mad\u00e1sokhoz specifikus be\u00e1ll\u00edt\u00e1sok vagy a c\u00e9lpont \u00e1ltal v\u00e9grehajtott bizonyos m\u0171veletek sz\u00fcks\u00e9gesek. Mindezek a sebezhet\u0151s\u00e9gek felfedhet\u0151k a Wi-Fi biztons\u00e1gi protokollok haszn\u00e1lat\u00e1t\u00f3l f\u00fcggetlen\u00fcl, bele\u00e9rtve a WPA3 alkalmaz\u00e1s\u00e1t is. <\/p>\n

A legt\u00f6bb felfedezett t\u00e1mad\u00e1si m\u00f3dszer lehet\u0151v\u00e9 teszi, hogy a t\u00e1mad\u00f3 L2 kereteket illesszen be egy v\u00e9dett h\u00e1l\u00f3zatba, ami lehet\u0151v\u00e9 teszi, hogy besz\u00fcremljen a c\u00e9lpont forgalm\u00e1ba. A legre\u00e1lisabb t\u00e1mad\u00e1si forgat\u00f3k\u00f6nyvk\u00e9nt eml\u00edtik a DNS v\u00e1laszok megv\u00e1ltoztat\u00e1s\u00e1t a felhaszn\u00e1l\u00f3 \u00e1tir\u00e1ny\u00edt\u00e1sa a t\u00e1mad\u00f3 hosztj\u00e1ra. P\u00e9lda arra is, hogyan haszn\u00e1lhat\u00f3k ki a sebezhet\u0151s\u00e9gek a c\u00edmford\u00edt\u00f3 figyelmen k\u00edv\u00fcl hagy\u00e1s\u00e1ra egy vezet\u00e9k n\u00e9lk\u00fcli routerben, lehet\u0151v\u00e9 t\u00e9ve a helyi h\u00e1l\u00f3zatban l\u00e9v\u0151 eszk\u00f6z k\u00f6zvetlen el\u00e9r\u00e9s\u00e9t, vagy az \u00e1llom\u00e1nyi t\u0171zfal korl\u00e1toz\u00e1sainak megker\u00fcl\u00e9s\u00e9t. A m\u00e1sodik sebezhet\u0151s\u00e9gi csoport, amely a fragment\u00e1lt keretek kezel\u00e9s\u00e9vel kapcsolatos, lehet\u0151v\u00e9 teszi a vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zati forgalom adatair\u00f3l val\u00f3 inform\u00e1ci\u00f3k kinyer\u00e9s\u00e9t \u00e9s a felhaszn\u00e1l\u00f3i adatok elfog\u00e1s\u00e1t, amelyeket titkos\u00edt\u00e1s n\u00e9lk\u00fcl tov\u00e1bb\u00edtanak. <\/p>\n

A researcher has prepared a demonstration showing how vulnerabilities can be exploited to intercept passwords transmitted when accessing a website via unencrypted HTTP. It also demonstrates how to attack a smart socket controlled via Wi-Fi and use it as a launchpad to continue attacking outdated devices on the local network that have unpatched vulnerabilities (for instance, it was possible to attack an unupdated Windows 7 computer within the internal network by circumventing NAT).

\r\n \"Vide\u00f3\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

To exploit vulnerabilities, an attacker must be within range of the target wireless device to send a specially crafted packet to the victim. The issues affect both client devices and wireless cards, as well as access points and Wi-Fi routers. Generally, as countermeasures, using HTTPS along with DNS traffic encryption via DNS over TLS or DNS over HTTPS is sufficient for protection. The application of VPN<\/a>. <\/p>\n

The four vulnerabilities identified in the implementations of wireless devices are considered the most dangerous as they allow for trivial methods to substitute their unencrypted frames: <\/p>\n