{"id":71704,"date":"2020-02-27T20:54:05","date_gmt":"2020-02-27T17:54:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik"},"modified":"2020-03-03T16:10:37","modified_gmt":"2020-03-03T13:10:37","slug":"uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","title":{"rendered":"Vulnerabilitate \u00een cipurile Wi-Fi de la Cypress \u0219i Broadcom, care permite decriptarea traficului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Cercet\u0103torii de la compania Eset <noindex><a rel=\"nofollow\" href=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2020\/02\/ESET_Kr00k.pdf\">au dezv\u0103luit<\/a><\/noindex> la conferin\u021ba care are loc \u00een aceste zile <noindex><a rel=\"nofollow\" href=\"https:\/\/www.rsaconference.com\/usa\/agenda\/kr00k-how-kracking-amazon-echo-exposed-a-billion-vulnerable-wifi-devices\">RSA 2020<\/a><\/noindex> informa\u021bii despre <noindex><a rel=\"nofollow\" href=\"https:\/\/www.eset.com\/int\/kr00k\/\">vulnerabilit\u0103\u021bi<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-15126\">CVE-2019-15126<\/a><\/noindex>) \u00een cipurile wireless de la Cypress \u0219i Broadcom, care permit decriptarea traficului Wi-Fi interceptat, protejat prin utilizarea protocolului WPA2. Vulnerabilit\u0103\u021bii i s-a acordat numele de cod Kr00k. Problema afecteaz\u0103 cipurile FullMAC (stiva Wi-Fi este implementat\u0103 pe cip, nu \u00een driver), utilizate \u00eentr-o gam\u0103 larg\u0103 de dispozitive de consum, de la smartphone-uri de la produc\u0103tori cunoscu\u021bi (Apple, Xiaomi, Google, Samsung), la difuzoare inteligente (Amazon Echo, Amazon Kindle), pl\u0103ci (Raspberry Pi 3) \u0219i puncte de acces wireless (Huawei, ASUS, Cisco).<\/p>\n<p>Vulnerabilitatea este cauzat\u0103 de o gestionare incorect\u0103 a cheilor de criptare la deconectare (<noindex><a rel=\"nofollow\" href=\"https:\/\/community.cisco.com\/t5\/wireless-mobility-documents\/802-11-association-status-802-11-deauth-reason-codes\/ta-p\/3148055\">dezassociere<\/a><\/noindex>) a dispozitivului de la punctul de acces. La deconectare, cheia de sesiune (PTK) stocat\u0103 \u00een memoria cipului este resetat\u0103, deoarece nu se va trimite \u00een continuare date \u00een sesiunea curent\u0103. Esen\u021ba vulnerabilit\u0103\u021bii const\u0103 \u00een faptul c\u0103 datele r\u0103mase \u00een tamponul de transmisie (TX) sunt criptate cu o cheie deja resetat\u0103, care const\u0103 doar din zerouri \u0219i, prin urmare, pot fi decriptate cu u\u0219urin\u021b\u0103 la interceptare. Cheia goal\u0103 se aplic\u0103 doar la datele reziduale din tampon, ale c\u0103ror dimensiuni se ridic\u0103 la c\u00e2\u021biva kilobyte. <\/p>\n<p>Astfel, atacul se bazeaz\u0103 pe trimiterea artificial\u0103 a unor cadre specifice care provoac\u0103 dezassocierea \u0219i interceptarea datelor trimise ulterior. Dezassocierea este utilizat\u0103 \u00een mod obi\u0219nuit \u00een re\u021belele wireless pentru a comuta de la un punct de acces la altul \u00een timpul roamingului sau \u00een cazul pierderii conexiunii cu punctul de acces curent. Dezassocierea poate fi provocat\u0103 prin trimiterea unui cadru de control, care este transmis \u00een format necriptat \u0219i nu necesit\u0103 autentificare (atacatorului \u00eei este suficient s\u0103 aib\u0103 acces la semnalul Wi-Fi, dar nu este necesar\u0103 conectarea la re\u021beaua wireless). Atacul a fost testat doar utiliz\u00e2nd protocolul WPA2, iar posibilitatea de a efectua atacul pe WPA3 nu a fost verificat\u0103.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/www.welivesecurity.com\/wp-content\/uploads\/2020\/02\/ESET_Kr00k.pdf\"><img decoding=\"async\" alt=\"Vulnerabilitate \u00een cipurile Wi-Fi de la Cypress \u0219i Broadcom, care permite decriptarea traficului\" src=\"\/wp-content\/uploads\/2020\/02\/164a8d4e32d6591de3d4938ec4dc2d30.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>O evaluare preliminar\u0103 sugereaz\u0103 c\u0103 vulnerabilitatea ar putea afecta miliarde de dispozitive utilizate \u00een mod curent. Pe dispozitivele cu cipuri Qualcomm, Realtek, Ralink \u0219i Mediatek, problema nu se manifest\u0103. De asemenea, decriptarea traficului este posibil\u0103 at\u00e2t atunci c\u00e2nd un dispozitiv client vulnerabil se conecteaz\u0103 la un punct de acces f\u0103r\u0103 probleme, c\u00e2t \u0219i \u00een cazul \u00een care un dispozitiv care nu este afectat de problem\u0103 se conecteaz\u0103 la un punct de acces pe care se manifest\u0103 vulnerabilitatea. Mul\u021bi produc\u0103tori de dispozitive de consum au lansat deja actualiz\u0103ri de firmware care rezolv\u0103 vulnerabilitatea (de exemplu, compania Apple <noindex><a rel=\"nofollow\" href=\"https:\/\/support.apple.com\/en-us\/HT210721\">a rezolvat<\/a><\/noindex> vulnerabilitatea \u00eenc\u0103 din octombrie anul trecut). <\/p>\n<p>Este de remarcat c\u0103 vulnerabilitatea afecteaz\u0103 criptarea la nivelul re\u021belei wireless \u0219i permite analiza doar a conexiunilor nesecurizate stabilite de utilizator, dar nu ofer\u0103 posibilitatea de a compromite conexiunile cu criptare la nivelul aplica\u021biei (HTTPS, SSH, STARTTLS, DNS over TLS, VPN etc.). Pericolul atacului este, de asemenea, diminuat de faptul c\u0103, \u00een timpul unui atac, atacatorul poate decripta doar c\u00e2\u021biva kilobytes de date care s-au aflat \u00een bufferul de transmisie \u00een momentul deconect\u0103rii. Pentru a capturea cu succes datele confiden\u021biale trimise printr-o conexiune nesecurizat\u0103, atacatorul trebuie fie s\u0103 \u0219tie exact momentul trimiterii acestora, fie s\u0103 ini\u021bieze constant deconectarea de la punctul de acces, ceea ce va atrage aten\u021bia utilizatorului din cauza restart\u0103rilor constante ale conexiunii wireless.<\/p>\n<p>Unele dintre dispozitivele testate de Eset pentru a verifica posibilele atacuri sunt:<\/p>\n<ul>\n<li> Amazon Echo 2nd gen\n<li> Amazon Kindle 8th gen\n<li> Apple iPad mini 2\n<li> Apple iPhone 6, 6S, 8, XR\n<li> Apple MacBook Air Retina 13-inch 2018\n<li> Google Nexus 5\n<li> Google Nexus 6\n<li> Google Nexus 6S\n<li> Raspberry Pi 3\n<li> Samsung Galaxy S4 GT-I9505\n<li> Samsung Galaxy S8\n<li> Xiaomi Redmi 3S\n<li> Routerele wireless ASUS RT-N12, Huawei B612S-25d, Huawei EchoLife HG8245H, Huawei E5577Cs-321\n<li> <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20200226-wi-fi-info-disclosure\">Punctele de acces Cisco<\/a><\/noindex>\n<\/ul>\n<p><center><br \/>\n<div class=\"youtube-placeholder\" data-id=\"_40E6WRMRyE\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/_40E6WRMRyE\/hqdefault.jpg\" alt=\"Reda\u021bi video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52441\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 RSA 2020 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-15126) \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0439 Wi-Fi \u0442\u0440\u0430\u0444\u0438\u043a, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Kr00k. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0438\u043f\u044b FullMAC (Wi-Fi \u0441\u0442\u0435\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0447\u0438\u043f\u0430, \u0430 \u043d\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71705,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71704","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-27T17:54:05+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:10:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een cipurile Wi-Fi Cypress \u0219i Broadcom care permit decriptarea traficului | ProHoster","description":"Cercet\u0103torii de la Eset au dezv\u0103luit, la conferin\u021ba care se desf\u0103\u0219oar\u0103 \u00een aceste zile,","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi \u0447\u0438\u043f\u0430\u0445 Cypress \u0438 Broadcom, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eset \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u044d\u0442\u0438 \u0434\u043d\u0438 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-wi-fi-chipah-cypress-i-broadcom-pozvolyayushhaya-rasshifrovat-trafik","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-27T17:54:05+00:00","article:modified_time":"2020-03-03T13:10:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71704","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:57:37","updated":"2022-10-01 10:33:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/71704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=71704"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/71704\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/71705"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=71704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=71704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=71704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}