{"id":36876,"date":"2019-10-31T22:14:26","date_gmt":"2019-10-31T19:14:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-atakovat-android-ustrojstvo-cherez-wi-fi\/"},"modified":"2019-10-31T22:14:26","modified_gmt":"2019-10-31T19:14:26","slug":"uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-atakovat-android-ustrojstvo-cherez-wi-fi","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-atakovat-android-ustrojstvo-cherez-wi-fi","title":{"rendered":"Vulnerabilitate \u00een cipurile Qualcomm, care permite atacarea dispozitivelor Android prin Wi-Fi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen stiva wireless de cipuri Qualcomm au fost identificate<\/a><\/noindex> tre vulnerabilit\u0103\u021bi, care sunt prezentate sub numele de cod \u201eQualPwn\u201d. Prima problem\u0103 (CVE-2019-10539) permite atacuri de la distan\u021b\u0103 asupra dispozitivelor bazate pe platforma Android prin Wi-Fi. A doua problem\u0103 se reg\u0103se\u0219te \u00een firmware-ul proprietar cu stiva wireless Qualcomm \u0219i permite accesul la modemul baseband (CVE-2019-10540). A treia problem\u0103 exist\u0103<\/a><\/noindex> se reg\u0103se\u0219te \u00een driverul icnss (CVE-2019-10538) \u0219i ofer\u0103 posibilitatea execut\u0103rii codului personal la nivelul nucleului platformei Android. \u00cen cazul exploat\u0103rii cu succes a combina\u021biei acestor vulnerabilit\u0103\u021bi, atacatorul poate ob\u021bine control de la distan\u021b\u0103 asupra dispozitivului utilizatorului, pe care Wi-Fi-ul este activat (pentru atac, este necesar ca victima \u0219i atacatorul s\u0103 fie conecta\u021bi la aceea\u0219i re\u021bea wireless).<\/p>\n

Posibilitatea atacului a fost demonstrat\u0103 pentru smartphone-urile Google Pixel2 \u0219i Pixel3. Potrivit cercet\u0103torilor, problema afecteaz\u0103 poten\u021bial mai mult de 835.000 de dispozitive bazate pe SoC Qualcomm Snapdragon 835 \u0219i cipuri mai noi (\u00eencep\u00e2nd cu Snapdragon 835, firmware-ul WLAN a fost integrat cu subsistemul modemului \u0219i a fost executat ca o aplica\u021bie izolat\u0103 \u00een spa\u021biul utilizatorului). Conform informa\u021biile<\/a><\/noindex> Qualcomm, problema afecteaz\u0103 zeci de cipuri diferite. <\/p>\n

\u00cen prezent, sunt disponibile doar informa\u021bii generale despre vulnerabilit\u0103\u021bi, iar detaliile se preconizeaz\u0103<\/a><\/noindex> vor fi divulgate pe 8 august la conferin\u021ba Black Hat. Companiile Qualcomm \u0219i Google au fost informate despre probleme \u00een martie \u0219i au reu\u0219it deja s\u0103 emit\u0103 corec\u021bii (Qualcomm a raportat problemele \u00een raportul din iunie<\/a><\/noindex>, iar Google a remediat vulnerabilit\u0103\u021bile \u00een actualizarea din august<\/a><\/noindex> a platformei Android). To\u021bi utilizatorii de dispozitive cu cipuri Qualcomm sunt sf\u0103tui\u021bi s\u0103 instaleze actualiz\u0103rile disponibile.<\/p>\n

Pe l\u00e2ng\u0103 problemele legate de cipurile Qualcomm, \u00een actualizarea din august a platformei Android a fost remediat\u0103 \u0219i o vulnerabilitate critic\u0103 (CVE-2019-11516) \u00een stiva Bluetooth Broadcom, care permite atacatorului s\u0103 execute codul s\u0103u \u00een contextul unui proces privilegiat prin trimiterea unei cereri de transfer de date special conceput\u0103. \u00cen componentele sistemului Android a fost remediat\u0103 o vulnerabilitate (CVE-2019-2130) care permite executarea codului cu privilegii crescute \u00een timpul proces\u0103rii fi\u0219ierelor PAC special concepute.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u0447\u0438\u043f\u043e\u0432 Qualcomm \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u043f\u043e\u0434\u043d\u0435\u0441\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c «QualPwn». \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 (CVE-2019-10539) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android \u0447\u0435\u0440\u0435\u0437 Wi-Fi. \u0412\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0441 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0442\u0435\u043a\u043e\u043c Qualcomm \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a baseband-\u043c\u043e\u0434\u0435\u043c\u0443 (CVE-2019-10540). \u0422\u0440\u0435\u0442\u044c\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 icnss (CVE-2019-10538) \u0438 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36876","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een cipurile Qualcomm care permite atacarea unui dispozitiv Android prin Wi-Fi | ProHoster","description":"\u00cen stiva wireless de cipuri Qualcomm au fost identificate trei vulnerabilit\u0103\u021bi, cunoscute sub codul \"QualPwn\".","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-atakovat-android-ustrojstvo-cherez-wi-fi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0447\u0438\u043f\u0430\u0445 Qualcomm, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0447\u0435\u0440\u0435\u0437 Wi-Fi | ProHoster","og:description":"\u0412 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u0447\u0438\u043f\u043e\u0432 Qualcomm \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u043f\u043e\u0434\u043d\u0435\u0441\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c "QualPwn".","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-atakovat-android-ustrojstvo-cherez-wi-fi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:26+00:00","article:modified_time":"2019-10-31T19:14:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36876","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:09:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:23","updated":"2026-01-22 05:09:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=36876"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36876\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=36876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=36876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=36876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}