Ofufuza ochokera ku Eset kumsonkhano womwe ukuchitika masiku ano zambiri za () mu tchipisi opanda zingwe za Cypress ndi Broadcom, zomwe zimakupatsani mwayi kuti mutsegule magalimoto otetezedwa a Wi-Fi otetezedwa pogwiritsa ntchito protocol ya WPA2. Chiwopsezochi chatchedwa Kr00k. Vutoli limakhudza tchipisi ta FullMAC (stack ya Wi-Fi ikugwiritsidwa ntchito kumbali ya chip, osati mbali ya dalaivala), yomwe imagwiritsidwa ntchito pazida zosiyanasiyana zogula, kuchokera ku mafoni a m'manja kuchokera kwa opanga odziwika bwino (Apple, Xiaomi, Google, Samsung) mpaka olankhula anzeru (Amazon Echo, Amazon Kindle) , ma board (Raspberry Pi 3) ndi malo opanda zingwe (Huawei, ASUS, Cisco).
Chiwopsezocho chimayamba chifukwa chakusintha kolakwika kwa makiyi achinsinsi akamadula () zipangizo zochokera kumalo olowera. Mukadula, kiyi yosungidwa (PTK) chip imasinthidwa kukhala ziro, popeza palibe chidziwitso china chomwe chidzatumizidwa mu gawoli. Zomwe zili pachiwopsezo ndikuti deta yomwe yatsala mu transmission (TX) buffer imabisidwa ndi kiyi yoyeretsedwa kale yokhala ndi ziro zokha ndipo, motero, imatha kusindikizidwa mosavuta ikalandidwa. Chinsinsi chopanda kanthu chimangogwira ntchito ku data yotsalira mu buffer, yomwe ndi ma kilobytes ochepa kukula kwake.
Chifukwa chake, kuukiraku kumatengera kutumiza mwachinyengo kwa mafelemu ena omwe amayambitsa kupatukana, komanso kuthamangitsidwa kwa data yomwe idatumizidwa kenako. Kudzilekanitsa kumagwiritsidwa ntchito kwambiri pamanetiweki opanda zingwe kuti asinthe kuchoka pamalo ena olowera kupita ku ena akamayendayenda kapena kulumikizana ndi malo omwe akupezekapo kukutayika. Kudzilekanitsa kungayambitsidwe ndi kutumiza chimango chowongolera, chomwe chimaperekedwa mosadziwika bwino ndipo sichifuna kutsimikizika (wowukirayo amangofunika kufikira chizindikiro cha Wi-Fi, koma safunikira kulumikizidwa ndi netiweki yopanda zingwe). Kuukiraku kudayesedwa kokha pogwiritsa ntchito protocol ya WPA2; kuthekera kochita kuwukira pa WPA3 sikunayesedwe.
Malinga ndi kuyerekezera koyambirira, kusatetezeka kungathe kukhudza mabiliyoni a zida zomwe zikugwiritsidwa ntchito. Vuto silikuwoneka pazida zomwe zili ndi Qualcomm, Realtek, Ralink ndi Mediatek chips. Panthawi imodzimodziyo, kutsekedwa kwa magalimoto kumatheka pamene chipangizo cha kasitomala chomwe chili pachiwopsezo chikafika pamalo opanda vuto, ndipo pamene chipangizo chomwe sichimakhudzidwa ndi vutoli chikafika kumalo olowera omwe amasonyeza chiwopsezo. Opanga zida zambiri za ogula atulutsa kale zosintha za firmware zomwe zimalimbana ndi chiwopsezo (mwachitsanzo, Apple chiopsezo kubwerera mu October chaka chatha).
Zindikirani kuti chiwopsezochi chimakhudza kubisa pa intaneti yopanda zingwe ndikukulolani kuti muwunikire maulalo osatetezedwa omwe amakhazikitsidwa ndi wogwiritsa ntchito, koma sizipangitsa kuti zitheke kusokoneza kulumikizana ndi kubisa pamlingo wofunsira (HTTPS, SSH, STARTTLS, DNS pa TLS, VPN, etc.). Kuopsa kwa kuwukira kumachepetsedwanso chifukwa chakuti panthawi yomwe wowukirayo amatha kutsitsa ma kilobytes angapo a data yomwe inali mu buffer yopatsirana panthawi yolumikizidwa. Kuti mugwire bwino zinsinsi zomwe zatumizidwa pa intaneti yopanda chitetezo, wowukirayo ayenera kudziwa nthawi yomwe adatumizidwa, kapena nthawi zonse yambitsani kulumikizidwa komwe kumawonekera, zomwe zidzawonekere kwa wogwiritsa ntchito chifukwa choyambiranso kulumikizana popanda zingwe.
Zina mwa zida zoyesedwa ndi Eset kuti zitha kuwopseza:
- Amazon Echo 2 gen
- Mtundu wa 8 wa Amazon
- Apulo iPad mini 2
- Apple iPhone 6, 6S, 8, XR
- Apple MacBook Air Retina 13-inchi 2018
- Google Nexus 5
- Google Nexus 6
- Google Nexus 6S
- Rasipiberi Pihahiroti 3
- GT-I4 ya Samsung Galaxy S9505
- Samsung Way S8
- Xiaomi Redmi 3S
- Ma router opanda zingwe ASUS RT-N12, Huawei B612S-25d, Huawei EchoLife HG8245H, Huawei E5577Cs-321
Source: opennet.ru