{"id":115832,"date":"2024-05-16T14:59:26","date_gmt":"2024-05-16T12:59:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-ssid-confusion-pozvolyayushhaya-podmenit-set-wi-fi"},"modified":"2024-05-16T14:59:26","modified_gmt":"2024-05-16T12:59:27","slug":"ataka-ssid-confusion-pozvolyayushhaya-podmenit-set-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-ssid-confusion-pozvolyayushhaya-podmenit-set-wi-fi","title":{"rendered":"Atacul SSID Confusion, care permite substituirea re\u021belei Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la Universitatea Catolic\u0103 din Leuven (Belgia) a descoperit o vulnerabilitate arhitectural\u0103 (CVE-2023-52424) \u00een standardul Wi-Fi IEEE 802.11, care permite conectarea la o re\u021bea wireless mai pu\u021bin protejat\u0103 \u00een loc de re\u021beaua de \u00eencredere la care utilizatorul inten\u021biona s\u0103 se conecteze, dup\u0103 care se poate realiza interceptarea \u0219i manipularea traficului. Problema se manifest\u0103 \u00een stivele wireless ale oric\u0103rui sistem de operare \u0219i afecteaz\u0103 metodele de autentificare WPA3, WEP, EAP, AMPE \u0219i FILS. <\/p>\n

Tehnica de atac propus\u0103, denumit\u0103 Confuzia SSID, permite ocolirea metodelor de autentificare prezente \u00een protocol, care protejeaz\u0103 \u00eempotriva \u00eenlocuirii identificatorului re\u021belei SSID, \u00eempiedic\u00e2nd astfel crearea de re\u021bele false cu acela\u0219i nume ca re\u021beaua la care se conecteaz\u0103 clientul. Cauza problemei este defini\u021bia \u00een standard a situa\u021biilor \u00een care SSID poate fi neautentificat. \u00cen special, pentru a-\u0219i marca prezen\u021ba, punctul de acces trimite \u00een mod difuz cadre beacon care includ informa\u021biile despre re\u021beaua SSID. Pentru a simplifica procesul de c\u0103utare a re\u021belei, clien\u021bii nu autentific\u0103 SSID \u00een aceste cadre, deoarece se presupune c\u0103 verificarea va fi necesar\u0103 dup\u0103 ce clientul decide s\u0103 se conecteze la re\u021bea. <\/p>\n

Pentru a duce la bun sf\u00e2r\u0219it atacul, utilizatorul trebuie s\u0103 ini\u021bieze conectarea la o anumit\u0103 re\u021bea wireless, iar \u00een apropiere trebuie s\u0103 existe o alt\u0103 re\u021bea wireless cu acelea\u0219i parametrii de conectare ca \u0219i prima re\u021bea. Acest lucru se practic\u0103, de exemplu, c\u00e2nd se creeaz\u0103 re\u021bele diferite pentru benzile de 2.4GHz \u0219i 5GHz, una dintre acestea fiind slab protejat\u0103 \u0219i vulnerabil\u0103 la atacuri tipice de interceptare a traficului, precum KRACK sau Frag. Configurarea problematic\u0103 este, de asemenea, aplicat\u0103 \u00een unele re\u021bele universitare care suport\u0103 serviciul Eduroam. Atacatorul trebuie s\u0103 se afle \u00een zona de acoperire a semnalului pentru a se intercalare \u00eentre utilizator \u0219i re\u021beaua \u021bint\u0103 (MitM). Pentru a duce la cap\u0103t atacul, atacatorul nu trebuie s\u0103 cunoasc\u0103 datele de autentificare ale victimei. <\/p>\n

Atacul const\u0103 \u00een crearea de c\u0103tre atacator a unui punct de acces (WrongAP \u00een diagram\u0103), care asigur\u0103 pe un alt canal transmiterea cererilor c\u0103tre o re\u021bea fals\u0103, mai pu\u021bin protejat\u0103 (WrongNet), la care clientul ar trebui s\u0103 se conecteze \u00een locul re\u021belei dorite (TrustedNet). Punctul de acces poate fi creat pe un laptop obi\u0219nuit \u0219i este utilizat pentru organizarea unui atac MitM multi-canal asupra victimei (MC MitM). Atacul se desf\u0103\u0219oar\u0103 \u00een trei etape: <\/p>\n

  • Defini\u021bia re\u021belei (Network Discovery). Sistemul MitM intercept\u0103 pachetele trimise \u00een aer de victima \u0219i de punctul de acces de \u00eencredere (TrustedNet), \u00eenlocuind \u00een ele SSID \u2014 \u00een pachetele de la punctul de acces, SSID-ul este \u00eenlocuit cu identificatorul unei re\u021bele mai pu\u021bin securizate, iar \u00een r\u0103spunsurile victimei cu cel real, pentru a simula interac\u021biunea clientului cu punctul de acces de \u00eencredere. Astfel, dispozitivul victimei prime\u0219te r\u0103spunsuri \u0219i consider\u0103 c\u0103 re\u021beaua dorit\u0103 se afl\u0103 \u00een apropiere, de\u0219i aceste r\u0103spunsuri sunt transmise de punctul de acces al atacatorului.\n
  • Capturarea autentific\u0103rii (Authentication hijacking). Atacatorul simuleaz\u0103 o autentificare reu\u0219it\u0103 \u0219i for\u021beaz\u0103 clientul s\u0103 se conecteze la o re\u021bea mai pu\u021bin protejat\u0103, \u00een loc de cea de \u00eencredere. A\u0219a cum s-a \u00eent\u00e2mplat \u00een etapa anterioar\u0103, atacatorul intercepta cadrele trimise \u00een timpul autentific\u0103rii clientului, \u00eenlocuie\u0219te SSID-ul din acestea \u0219i le retransmite punctului de acces.\n
  • MitM. Dup\u0103 stabilirea canalului de comunicare, atacatorul \u00eenlocuie\u0219te SSID-ul de la WrongNet cu TrustedNet, cre\u00e2nd iluzia c\u0103 utilizatorul lucreaz\u0103 printr-o re\u021bea de \u00eencredere, \u0219i nu printr-o re\u021bea mai pu\u021bin protejat\u0103.
    \"Atacul<\/center>\n

    Profit\u00e2nd de o vulnerabilitate, atacatorul poate for\u021ba clientul s\u0103 se conecteze la o re\u021bea mai pu\u021bin protejat\u0103, iar \u00een interfa\u021b\u0103 va fi afi\u0219at SSID-ul re\u021belei la care utilizatorul inten\u021biona ini\u021bial s\u0103 se conecteze, \u0219i nu cel la care este conectat de fapt. Odat\u0103 ce utilizatorul se conecteaz\u0103 printr-o re\u021bea nesecurizat\u0103, atacatorul poate analiza \u0219i interveni \u00een fluxurile de trafic nesecurizate. De asemenea, la utilizarea unor VPN<\/a>, cum ar fi WARP, hide.me \u0219i Windscribe, VPN-ul nu va fi activat c\u00e2nd utilizatorul se conecteaz\u0103 la re\u021belele marcate \u00een set\u0103ri ca fiind de \u00eencredere. <\/p>\n

    Atacul este aplicabil protocoalelor de autentificare wireless care folosesc EAP (Extensible Authentication Protocol), SAE (Simultaneous Authentication of Equals) \u0219i 802.1X, precum \u0219i \u00een modul op\u021bional de func\u021bionare al protocolului WPA3, \u00een care SSID nu este utilizat pentru formarea cheii PMK (Pairwise Master Key), ceea ce se face pentru a exclude datele cunoscute ini\u021bial \u00een formarea cheii, cu scopul de a proteja \u00eempotriva diferitelor atacuri criptografice. Protocolul FILS (Fast Initial Link Setup) este vulnerabil atunci c\u00e2nd folose\u0219te PMK, creat \u00een timpul negocierii conexiunii bazate pe EAP. Protocoalele WPA1, WPA2 \u0219i FT (Fast BSS Transition) nu sunt afectate de aceast\u0103 problem\u0103, deoarece necesit\u0103 un SSID corect \u00een procesul de negociere a conexiunii. <\/p>\n

    Pentru a proteja \u00eempotriva atacului SSID Confusion, este men\u021bionat c\u0103 pe partea punctului de acces ar trebui inclus\u0103 \u00een standardul 802.11 cerin\u021ba de autentificare SSID la conectare, ceea ce poate fi realizat prin ad\u0103ugarea SSID \u00een func\u021bia de formare a cheii sau prin includerea SSID \u00een num\u0103rul de date suplimentare verificate \u00een timpul negocierii conexiunii. Pe partea clientului, protec\u021bia poate fi organizat\u0103 prin asigurarea securit\u0103\u021bii cadrelor beacon (va fi folosit\u0103 \u00een WiFi 7). Creatorii re\u021belelor pot preveni desf\u0103\u0219urarea atacului, renun\u021b\u00e2nd la utilizarea acreditivelor comune \u00een re\u021bele cu SSID-uri diferite. Utilizatorii se pot proteja utiliz\u00e2nd VPN-uri de \u00eencredere atunci c\u00e2nd se conecteaz\u0103 prin orice re\u021bele wireless.

    \r\n \"Reda\u021bi\r\n
    <\/div>\r\n <\/div><\/center>
    \n
    Sursa:     opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u043a\u0430\u0442\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0411\u0435\u043b\u044c\u0433\u0438\u044f), \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-52424) \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0435 Wi-Fi IEEE 802.11, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043c\u0435\u043d\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0432\u043c\u0435\u0441\u0442\u043e \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0441\u0435\u0442\u0438, \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u043c\u0435\u0440\u0435\u0432\u0430\u043b\u0441\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430\u0445 \u043b\u044e\u0431\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 WPA3, WEP, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":115833,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115832","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atacul SSID Confusion, care permite substituirea re\u021belei Wi-Fi | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Catolic\u0103 din Leuven (Belgia) a descoperit o vulnerabilitate arhitectural\u0103 (CVE-2023-52424) \u00een standardul Wi-Fi IEEE 802.11, care permite conectarea la o re\u021bea mai pu\u021bin protejat\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-ssid-confusion-pozvolyayushhaya-podmenit-set-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 SSID Confusion, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0435\u0442\u044c Wi-Fi | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u043a\u0430\u0442\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0411\u0435\u043b\u044c\u0433\u0438\u044f), \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-52424) \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0435 Wi-Fi IEEE 802.11, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043c\u0435\u043d\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-ssid-confusion-pozvolyayushhaya-podmenit-set-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-16T12:59:27+00:00","article:modified_time":"2024-05-16T12:59:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115832","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:58:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 00:29:19","updated":"2026-02-04 14:58:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115832","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=115832"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115832\/revisions"}],"predecessor-version":[{"id":156771,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115832\/revisions\/156771"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/115833"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=115832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=115832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=115832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}