{"id":107780,"date":"2023-04-08T12:48:10","date_gmt":"2023-04-08T10:48:12","guid":{"rendered":"https:\/\/prohoster.info\/?p=107780"},"modified":"2023-04-10T11:12:07","modified_gmt":"2023-04-10T09:12:07","slug":"uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika","title":{"rendered":"Vulnerabilitate \u00een punctele de acces wireless care permite interceptarea traficului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Un grup de cercet\u0103tori de la universit\u0103\u021bile Tsinghua (China) \u0219i George Mason (SUA) a dezv\u0103luit o vulnerabilitate (CVE-2022-25667) \u00een punctele de acces wireless, care permite interceptarea traficului (MITM) \u00een re\u021belele wireless protejate prin protocoalele WPA, WPA2 \u0219i WPA3. Prin manipularea pachetelor ICMP cu flagul \u201eredirect\u201d, un atacator poate redirec\u021biona traficul victimei \u00een interiorul re\u021belei wireless prin sistemul s\u0103u, ceea ce poate fi utilizat pentru interceptarea \u0219i \u00eenlocuirea sesiunilor necriptate (de exemplu, cererilor c\u0103tre site-uri f\u0103r\u0103 HTTPS).     <\/p>\n<p>Vulnerabilitatea este cauzat\u0103 de lipsa filtr\u0103rii corespunz\u0103toare a mesajelor ICMP false cu adresa de expeditor falsificat\u0103 (spoofing) \u00een procesoarele de re\u021bea (NPU, Network Processing Unit), care asigur\u0103 procesarea de nivel jos a pachetelor \u00een re\u021beaua wireless. Printre altele, NPU redirec\u021biona f\u0103r\u0103 verificare mesajele ICMP false cu flagul \u201eredirect\u201d, care pot fi utilizate pentru a modifica parametrii tabelelor de rutare pe partea utilizatorului-victim\u0103. Atacul const\u0103 \u00een trimiterea unui pachet ICMP \u00een numele punctului de acces, cu flagul \u201eredirect\u201d, specific\u00e2nd date false \u00een antetul pachetului. Din cauza vulnerabilit\u0103\u021bii, mesajul este redirec\u021bionat de punctul de acces \u0219i este procesat de stiva de re\u021bea a victimei, care consider\u0103 c\u0103 mesajul a fost trimis de punctul de acces.         <center><img decoding=\"async\" alt=\"Vulnerabilitate \u00een punctele de acces wireless care permite interceptarea traficului\" src=\"\/wp-content\/uploads\/2023\/04\/3e2e36d2e28151c63bab9813799af592.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>De asemenea, cercet\u0103torii au propus o metod\u0103 pentru a ocoli verific\u0103rile pachetelor ICMP cu flagul \u201eredirect\u201d de partea utilizatorului final \u0219i modificarea tabelului s\u0103u de rutare. Pentru a ocoli filtrarea, atacatorul determin\u0103 mai \u00eent\u00e2i un port UDP activ de partea victimei. Fiind \u00een aceea\u0219i re\u021bea wireless, atacatorul poate intercepta traficul, dar nu \u00eel poate decripta, deoarece nu cunoa\u0219te cheia de sesiune utilizat\u0103 de victim\u0103 atunci c\u00e2nd se conecteaz\u0103 la punctul de acces. Cu toate acestea, prin trimiterea de pachete de verificare victimei, atacatorul, pe baza analizei r\u0103spunsurilor ICMP primite cu flagul \u201eDestination Unreachable\u201d, poate determina un port UDP activ. Ulterior, atacatorul formeaz\u0103 un mesaj ICMP cu flagul \u201eredirect\u201d \u0219i un antet UDP fals, \u00een care este specificat portul UDP deschis identificat. Procesarea acestui mesaj duce la distorsionarea tabelului de rutare \u00een sistemul victimei \u0219i la redirec\u021bionarea traficului cu posibilitatea intercept\u0103rii sale \u00een clar la nivel de link.          <center><img decoding=\"async\" alt=\"Vulnerabilitate \u00een punctele de acces wireless care permite interceptarea traficului\" src=\"\/wp-content\/uploads\/2023\/04\/439dc3af6dbd40e2b750d38814c93a5b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>        <\/p>\n<p>Problema a fost confirmat\u0103 \u00een punctele de acces care utilizeaz\u0103 cipuri fabricate de HiSilicon \u0219i Qualcomm. Studiul a 55 de modele diferite de puncte de acces de la 10 produc\u0103tori renumi\u021bi (Cisco, NetGear, Xiaomi, Mercury, 360, Huawei, TP-Link, H3C, Tenda, Ruijie) a ar\u0103tat c\u0103 toate sunt vulnerabile \u0219i nu blocheaz\u0103 pachetele ICMP false. \u00cen plus, analiza a 122 de re\u021bele wireless existente a relevat posibilitatea de a desf\u0103\u0219ura un atac \u00een 109 re\u021bele (89%).       <center><img decoding=\"async\" alt=\"Vulnerabilitate \u00een punctele de acces wireless care permite interceptarea traficului\" src=\"\/wp-content\/uploads\/2023\/04\/be0ab562c719ae31a027dfd17d545edf.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/center>          <\/p>\n<p>Pentru a exploata vulnerabilit\u0103\u021bile, atacatorul trebuie s\u0103 aib\u0103 posibilitatea de a se conecta legitim la re\u021beaua Wi-Fi, adic\u0103 trebuie s\u0103 cunoasc\u0103 parametrii de acces la re\u021beaua wireless (vulnerabilit\u0103\u021bile permit ocolirea mecanismelor de segregare a traficului utilizatorilor din protocoalele WPA*). Spre deosebire de atacurile tradi\u021bionale MITM asupra re\u021belelor wireless, utiliz\u00e2nd tehnica de spoofing a pachetelor ICMP, atacatorul poate evita desf\u0103\u0219urarea propriului s\u0103u punct de acces fals pentru interceptarea traficului \u0219i poate folosi punctele de acces legitime care servesc re\u021beaua pentru a redirec\u021biona victimelor pachetele ICMP special concepute.          <center>  <video controls=\"\" style=\"width: 700px; height: 550px; max-width:100%\"  width=\"700\" height=\"550\"><source src=\"https:\/\/wifi-interception.github.io\/resources\/wifi-eng-noppt-mask-LAN.mp4\" type=\"video\/mp4\"><\/video><br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58935\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0426\u0438\u043d\u0445\u0443\u0430 (\u041a\u0438\u0442\u0430\u0439) \u0438 \u0414\u0436\u043e\u0440\u0434\u0436\u0430 \u041c\u0435\u0439\u0441\u043e\u043d\u0430 (\u0421\u0428\u0410) \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-25667) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 (MITM) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 WPA, WPA2 \u0438 WPA3. \u0427\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e ICMP-\u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c &#171;redirect&#187; \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0436\u0435\u0440\u0442\u0432\u044b \u0432\u043d\u0443\u0442\u0440\u0438 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":107781,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107780","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0426\u0438\u043d\u0445\u0443\u0430 (\u041a\u0438\u0442\u0430\u0439) \u0438 \u0414\u0436\u043e\u0440\u0434\u0436\u0430 \u041c\u0435\u0439\u0441\u043e\u043d\u0430 (\u0421\u0428\u0410) \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-25667) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 (MITM) \u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0426\u0438\u043d\u0445\u0443\u0430 (\u041a\u0438\u0442\u0430\u0439) \u0438 \u0414\u0436\u043e\u0440\u0434\u0436\u0430 \u041c\u0435\u0439\u0441\u043e\u043d\u0430 (\u0421\u0428\u0410) \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-25667) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 (MITM) \u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-04-08T10:48:12+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-04-10T09:12:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een punctele de acces wireless, care permite interceptarea traficului | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Tsinghua (China) \u0219i Universitatea George Mason (SUA) a dezv\u0103luit informa\u021bii despre o vulnerabilitate (CVE-2022-25667) \u00een punctele de acces wireless, care permite interceptarea traficului (MITM).","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0426\u0438\u043d\u0445\u0443\u0430 (\u041a\u0438\u0442\u0430\u0439) \u0438 \u0414\u0436\u043e\u0440\u0434\u0436\u0430 \u041c\u0435\u0439\u0441\u043e\u043d\u0430 (\u0421\u0428\u0410) \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-25667) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 (MITM) \u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-04-08T10:48:12+00:00","article:modified_time":"2023-04-10T09:12:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/107780","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=107780"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/107780\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/107781"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=107780"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=107780"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=107780"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}