{"id":107780,"date":"2023-04-08T12:48:10","date_gmt":"2023-04-08T10:48:12","guid":{"rendered":"https:\/\/prohoster.info\/?p=107780"},"modified":"2023-04-10T11:12:07","modified_gmt":"2023-04-10T09:12:07","slug":"uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-besprovodnyh-tochkah-dostupa-pozvolyayushhaya-organizovat-perehvat-trafika","title":{"rendered":"Nj\u00eb dob\u00ebsi n\u00eb pika ky\u00e7 wireless, e cila lejon kapjen e trafikut.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup studiuesish nga universitetet Tsinghua (Kina) dhe George Mason (SHBA) zbuluan nj\u00eb informacion mbi nj\u00eb vulnerabilitet (CVE-2022-25667) n\u00eb pikat akses wireless, q\u00eb lejon organizimin e kapjes s\u00eb trafikut (MITM) n\u00eb rrjetet wireless, t\u00eb mbrojtura me protokollet WPA, WPA2 dhe WPA3. N\u00ebp\u00ebrmjet manipulimit t\u00eb pakove ICMP me flagun «redirect», sulmuesi mund t\u00eb arrij\u00eb t\u00eb ridrejtoj\u00eb trafikun e viktim\u00ebs brenda rrjetit wireless p\u00ebrmes sistemit t\u00eb tij, q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr kapjen dhe z\u00ebvend\u00ebsimin e sesioneve t\u00eb patunduara (p.sh., k\u00ebrkesave p\u00ebr faqe pa HTTPS). <\/p>\n

Vulnerabiliteti shkaktohet nga mungesa e filtrimit t\u00eb duhur t\u00eb mesazheve ICMP t\u00eb rreme me adres\u00eb d\u00ebrguesi t\u00eb manipuluar (spoofing) n\u00eb procesor\u00ebt rrjet\u00eb (NPU, Network Processing Unit), q\u00eb sigurojn\u00eb p\u00ebrpunimin e pakove n\u00eb nivel t\u00eb ul\u00ebt n\u00eb rrjetin wireless. Nd\u00ebr t\u00eb tjera, NPU ridrejtojn\u00eb pa verifikim mbi spoofing paketat ICMP t\u00eb rreme me flagun «redirect», t\u00eb cilat mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb modifikuar parametrat e tabelave t\u00eb ruterit n\u00eb an\u00ebn e p\u00ebrdoruesit-viktim\u00eb. Sulmi p\u00ebrfshin d\u00ebrgimin e nj\u00eb pakete ICMP n\u00eb em\u00ebr t\u00eb pik\u00ebs s\u00eb aksesit me flagun «redirect» q\u00eb tregon t\u00eb dh\u00ebna t\u00eb gabuara n\u00eb kok\u00ebn e paket\u00ebs. Si rezultat i vulnerabilitetit, mesazhi ridrejtohet nga pika e aksesit dhe p\u00ebrpunohen n\u00eb stek\u00ebn rrjet\u00ebsore t\u00eb viktim\u00ebs, e cila mendon se mesazhi \u00ebsht\u00eb d\u00ebrguar nga pika e aksesit.

\"Nj\u00eb<\/center> <\/p>\n

Shtes\u00eb, studiuesit sugjerojn\u00eb nj\u00eb metod\u00eb p\u00ebr t\u00eb anashkaluar verifikimet e pakove ICMP me flagun «redirect» n\u00eb an\u00ebn e p\u00ebrdoruesit p\u00ebrfundimtar dhe p\u00ebr t\u00eb ndryshuar tabel\u00ebn e tij t\u00eb ruterit. P\u00ebr t\u00eb anashkaluar filtrimin, sulmuesi paraprakisht p\u00ebrcakton nj\u00eb port UDP aktiv n\u00eb an\u00ebn e viktim\u00ebs. Duke qen\u00eb n\u00eb t\u00eb nj\u00ebjtin rrjet wireless, sulmuesi mund t\u00eb kap\u00eb trafikun, por nuk mund ta dekriptoj\u00eb, pasi nuk e di \u00e7el\u00ebsin e sesionit t\u00eb p\u00ebrdorur kur viktima lidhet me pik\u00ebn e aksesit. Megjithat\u00eb, duke d\u00ebrguar paketa verifikimi viktim\u00ebs, sulmuesi, n\u00eb baz\u00eb t\u00eb analiz\u00ebs s\u00eb p\u00ebrgjigjeve ICMP q\u00eb vijn\u00eb me flagun «Destination Unreachable», mund t\u00eb p\u00ebrcaktoj\u00eb portin aktiv UDP. M\u00eb pas, sulmuesi formon nj\u00eb mesazh ICMP me flagun «redirect» dhe nj\u00eb kok\u00eb t\u00eb rreme UDP, n\u00eb t\u00eb cil\u00ebn tregohet porta UDP e hapur e zbuluar. P\u00ebrpunimi i k\u00ebtij mesazhi \u00e7on n\u00eb deformimin e tabel\u00ebs s\u00eb ruterit n\u00eb sistemin e viktim\u00ebs dhe ridrejton trafikun me mund\u00ebsin\u00eb e kapjes s\u00eb tij n\u00eb form\u00eb t\u00eb hapur n\u00eb nivelin e kanalit.

\"Nj\u00eb<\/center> <\/p>\n

Prania e problemit \u00ebsht\u00eb konfirmuar n\u00eb pikat e aksesit q\u00eb p\u00ebrdorin \u00e7ipa t\u00eb prodhimit HiSilicon dhe Qualcomm. Studimi i 55 modeleve t\u00eb ndryshme t\u00eb pikave t\u00eb aksesit nga 10 prodhues t\u00eb njohur (Cisco, NetGear, Xiaomi, Mercury, 360, Huawei, TP-Link, H3C, Tenda, Ruijie) tregoi se t\u00eb gjitha ato jan\u00eb t\u00eb prekshme nga vulnerabiliteti dhe nuk bllokojn\u00eb paketat ICMP t\u00eb rreme. P\u00ebr m\u00eb tep\u00ebr, gjat\u00eb analiz\u00ebs s\u00eb 122 rrjeteve t\u00eb ekzistuese pa tel u identifikua mund\u00ebsia e kryerjes s\u00eb sulmit n\u00eb 109 rrjete (89%).

\"Nj\u00eb<\/center> <\/p>\n

P\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetet, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb e lidhjes legjitime me rrjetin Wi-Fi, dmth. duhet t\u00eb dij\u00eb parametrat e hyrjes n\u00eb rrjetin pa tel (vulnerabilitetet lejojn\u00eb anashkalimin e mekanizmave t\u00eb ndarjes s\u00eb trafikut t\u00eb p\u00ebrdoruesve brenda rrjetit q\u00eb aplikohen n\u00eb protokollet WPA*). Ndryshe nga sulmet tradicionale MITM n\u00eb rrjetet pa tel, duke p\u00ebrdorur teknik\u00ebn e spoofing-it t\u00eb paketave ICMP, sulmuesi mund t\u00eb kaloj\u00eb pa u p\u00ebrdorur pik\u00ebn e tij t\u00eb rreme t\u00eb aksesit p\u00ebr t\u00eb kapur trafikun dhe t\u00eb p\u00ebrdor\u00eb pikat e aksesit legjitime q\u00eb sh\u00ebrbejn\u00eb n\u00eb rrjet p\u00ebr t\u00eb ridrejtuar viktim\u00ebs paketa ICMP t\u00eb formuara n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb.