ื ื™ื™ึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ WPA3 ื•ื•ื™ื™ืจืœื™ืก ื ืขืฅ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืื•ืŸ EAP-pwd

ืžืืชื™ ื•ื•ืื ื”ืืฃ ืื•ืŸ ืื™ื™ืœ ืจื•ื ืŸืื™ื™ืœ ืจื•ื ืŸ) ืื ื˜ืคืœืขืงื˜ ืึท ื ื™ื™ึทืข ื‘ืึทืคืึทืœืŸ ืื•ืคึฟืŸ (CVE-2019-13377) ืื•ื™ืฃ ื•ื•ื™ื™ืจืœื™ืก ื ืขื˜ื•ื•ืึธืจืงืก ื ื™ืฆืŸ WPA3 ื–ื™ื›ืขืจื”ื™ื™ื˜ ื˜ืขื›ื ืึธืœืึธื’ื™ืข, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ืึทืงื•ืžืขืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืคึผืึทืจืึธืœ ืงืขืจืึทืงื˜ืขืจื™ืกื˜ื™ืงืก ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื˜ืจืขืคืŸ ืขืก ืึธืคืคืœื™ื ืข. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืื™ืŸ ื“ื™ ืงืจืึทื ื˜ ื•ื•ืขืจืกื™ืข ื”ืึธืกื˜ืึทืคึผื“.

ืœืืžื™ืจ ื–ื™ืš ื“ืขืจืžืื ืขืŸ, ืื– ืื™ืŸ ืืคืจื™ืœ ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ื“ื™ ื–ืขืœื‘ืข ืžื—ื‘ืจื™ื ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื–ืขืงืก ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ WPA3, ืฆื• ืึทื ื˜ืงืขื’ื ืฉื˜ืขืœื  ื•ื•ืึธืก ื“ื™ Wi-Fi ืึทืœืœื™ืึทื ืกืข, ื•ื•ืึธืก ื“ืขื•ื•ืขืœืึธืคึผืก ืกื˜ืึทื ื“ืึทืจื“ืก ืคึฟืึทืจ ื•ื•ื™ื™ืจืœื™ืก ื ืขื˜ื•ื•ืึธืจืงืก, ื’ืขืžืื›ื˜ ืขื ื“ืขืจื•ื ื’ืขืŸ ืฆื• ื“ื™ ืจืขืงืึทืžืึทื ื“ื™ื™ืฉืึทื ื– ืคึฟืึทืจ ื™ื ืฉื•ืจื™ื ื’ ื–ื™ื›ืขืจ ื™ืžืคึผืœืึทืžืึทื ืฅ ืคื•ืŸ WPA3, ื•ื•ืึธืก ืคืืจืœืื ื’ื˜ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื–ื™ื›ืขืจ ื™ืœื™ืคึผื˜ื™ืงืึทืœ ืงื•ืจื•ื•ืขืก ื‘ืจืึทื™ื ืคึผืึธืึธืœ, ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื“ื™ ืคืจื™ืขืจ ื’ื™ืœื˜ื™ืง ื™ืœื™ืคึผื˜ื™ืงืึทืœ ืงื•ืจื•ื•ืขืก ืคึผ-521 ืื•ืŸ ืคึผ-256.

ืึธื‘ืขืจ, ื“ื™ ืึทื ืึทืœื™ืกื™ืก ื’ืขื•ื•ื™ื–ืŸ ืึทื– ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื‘ืจืึทื™ื ืคึผืึธืึธืœ ืคื™ืจื˜ ืฆื• ืึท ื ื™ื™ึทืข ืงืœืึทืก ืคื•ืŸ ื–ื™ื™ึทื˜-ืงืึทื ืึทืœ ืœื™ืงืก ืื™ืŸ ื“ื™ ืึทืœื’ืขืจื™ื“ืึทื ืคึฟืึทืจ ืงืฉืจ ืคืึทืจื”ืึทื ื“ืœื•ื ื’ ื’ืขื ื™ืฆื˜ ืื™ืŸ WPA3 ื“ืจืึทื’ืึธื ืคืœื™, ืคึผืจืึทื•ื•ื™ื™ื“ื™ื ื’ ืฉื•ืฅ ืงืขื’ืŸ ืฉืคึผืจื™ื›ื•ื•ืึธืจื˜ ื’ืขืกื™ื ื’ ืื™ืŸ ืึธืคืคืœื™ื ืข ืžืึธื“ืข. ื“ื™ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืคึผืจืึธื‘ืœืขื ื“ืขืžืึทื ืกื˜ืจื™ื™ืฅ ืึทื– ืงืจื™ื™ื™ื˜ื™ื ื’ ื™ืžืคึผืœืึทืžืึทื ืฅ ืคื•ืŸ Dragonfly ืื•ืŸ WPA3 ืคืจื™ื™ ืคื•ืŸ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ื“ืึทื˜ืŸ ืœื™ืงืก ืื™ื– ื’ืึธืจ ืฉื•ื•ืขืจ, ืื•ืŸ ืื•ื™ืš ื•ื•ื™ื™ึทื–ืŸ ื“ื™ ื“ื•ืจื›ืคืึทืœ ืคื•ืŸ ื“ื™ ืžืึธื“ืขืœ ืคื•ืŸ ื“ืขื•ื•ืขืœืึธืคึผื™ื ื’ ืกื˜ืึทื ื“ืึทืจื“ืก ื”ื™ื ื˜ืขืจ ืคืืจืžืื›ื˜ ื˜ื™ืจืŸ ืึธืŸ ืขืคื ื˜ืœืขืš ื“ื™ืกืงื•ืกื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ืžืขื˜ื”ืึธื“ืก ืื•ืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื•ืจืš ื“ื™ ืงื”ืœ.

ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ื‘ืจืึทื™ื ืคึผืึธืึธืœ ืก ื™ืœื™ืคึผื˜ื™ืง ื•ื™ืกื‘ื™ื™ื’, ื“ืจืึทื’ืึธื ืคืœื™ ืขื ืงืึธื•ื“ ืึท ืคึผืึทืจืึธืœ ื“ื•ืจืš ื“ื•ืจื›ืคื™ืจืŸ ืขื˜ืœืขื›ืข ืคึผืจื™ืœื™ืžืึทื ืขืจื™ ื™ื˜ืขืจื™ื™ืฉืึทื ื– ืคื•ืŸ ื“ื™ ืคึผืึทืจืึธืœ ืฆื• ื’ืขืฉื•ื•ื™ื ื“ ืจืขื›ืขื ืขืŸ ืึท ืงื•ืจืฅ ื”ืึทืฉ ืื™ื™ื“ืขืจ ืึทืคึผืœื™ื™ื™ื ื’ ื“ื™ ื™ืœื™ืคึผื˜ื™ืง ื•ื™ืกื‘ื™ื™ื’. ื‘ื™ื– ืึท ืงื•ืจืฅ ื”ืึทืฉ ืื™ื– ื’ืขืคึฟื•ื ืขืŸ, ื“ื™ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื•ื•ืึธืก ื–ืขื ืขืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ื–ืขื ืขืŸ ื’ืœื™ื™ึทืš ืึธืคืขื ื’ื™ืง ืื•ื™ืฃ ื“ืขื ืงืœื™ืขื ื˜ ืก ืคึผืึทืจืึธืœ ืื•ืŸ MAC ืึทื“ืจืขืก. ื“ื•ืจื›ืคื™ืจื•ื ื’ ืฆื™ื™ื˜ (ืงืึธืจืึทืœื™ื™ื˜ื™ื“ ืžื™ื˜ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื™ื˜ืขืจื™ื™ืฉืึทื ื–) ืื•ืŸ ื“ื™ืœื™ื™ื– ืฆื•ื•ื™ืฉืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื‘ืขืฉืึทืก ื“ื™ ืคึผืจื™ืœื™ืžืึทื ืขืจื™ ื™ื˜ืขืจื™ื™ืฉืึทื ื– ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืžืืกื˜ืŸ ืื•ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ืคึผืึทืจืึธืœ ืงืขืจืึทืงื˜ืขืจื™ืกื˜ื™ืงืก ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืึธืคืคืœื™ื ืข ืฆื• ืคึฟืึทืจื‘ืขืกืขืจืŸ ื“ื™ ืกืขืœืขืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืคึผืึทืจืึธืœ ืคึผืึทืจืฅ ืื™ืŸ ื“ื™ ืคึผืึทืจืึธืœ ื’ืขืกื™ื ื’ ืคึผืจืึธืฆืขืก. ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืึท ื‘ืึทืคืึทืœืŸ, ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื•ื•ืึธืก ืื™ื– ืงืึทื ืขืงื˜ื™ื ื’ ืฆื• ื“ื™ ื•ื•ื™ื™ืจืœื™ืก ื ืขืฅ ืžื•ื–ืŸ ื”ืึธื‘ืŸ ืฆื•ื˜ืจื™ื˜ ืฆื• ื“ื™ ืกื™ืกื˜ืขื.

ืื™ืŸ ื“ืขืจืฆื•, ื“ื™ ืจื™ืกืขืจื˜ืฉืขืจื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืึท ืฆื•ื•ื™ื™ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2019-13456) ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขื ืคึผืจืึธื˜ืึธืงืึธืœ. EAP-pwd, ื ื™ืฆืŸ ื“ื™ ื“ืจืึทื’ืึธื ืคืœื™ ืึทืœื’ืขืจื™ื“ืึทื. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืกืคึผืขืฆื™ืคื™ืฉ ืฆื• ื“ื™ FreeRADIUS RADIUS ืกืขืจื•ื•ืขืจ ืื•ืŸ, ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ ื“ื•ืจืš ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ื˜ืฉืึทื ืึทืœื–, ืคึผื•ื ืงื˜ ื•ื•ื™ ื“ืขืจ ืขืจืฉื˜ืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืขืก ืงืขื ืขืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืคืึทืจืคึผืึธืฉืขื˜ืขืจืŸ ื’ืขืกื™ื ื’ ืคึผืึทืจืึธืœ.

ืงืึทืžื‘ื™ื™ื ื“ ืžื™ื˜ ืึท ื™ืžืคึผืจื•ื•ื•ื“ ืื•ืคึฟืŸ ืคึฟืึทืจ ืคึฟื™ืœื˜ืจื™ืจื•ื ื’ ืจืึทืฉ ืื™ืŸ ื“ื™ ืœื™ื™ื˜ืึทื ืกื™ ืžืขื–ืฉืขืจืžืึทื ื˜ ืคึผืจืึธืฆืขืก, 75 ืžืขื–ืฉืขืจืžืึทื ืฅ ืคึผืขืจ MAC ืึทื“ืจืขืก ื–ืขื ืขืŸ ื’ืขื ื•ื’ ืฆื• ื‘ืึทืฉืœื™ืกืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื™ื˜ืขืจื™ื™ืฉืึทื ื–. ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ืึท ื’ืคึผื•, ื“ื™ ืžื™ื˜ืœ ืงืึธืก ืคึฟืึทืจ ื’ืขืกื™ื ื’ ืื™ื™ืŸ ื•ื•ืขืจื˜ืขืจื‘ื•ืš ืคึผืึทืจืึธืœ ืื™ื– ืขืกื˜ื™ืžืึทื˜ืขื“ ืฆื• $ 1. ืžืขื˜ื”ืึธื“ืก ืฆื• ืคึฟืึทืจื‘ืขืกืขืจืŸ ืคึผืจืึธื˜ืึธืงืึธืœ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืคึผืจืึธื‘ืœืขืžืก ื–ืขื ืขืŸ ืฉื•ื™ืŸ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ืคึผืœืึทืŸ ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ืฆื•ืงื•ื ืคึฟื˜ Wi-Fi ืกื˜ืึทื ื“ืึทืจื“ืก (WPA 3.1) ืื•ืŸ EAP-pwd. ืฆื•ื ื‘ืึทื“ื•ื™ืขืจืŸ, ืขืก ื•ื•ืขื˜ ื ื™ื˜ ื–ื™ื™ืŸ ืžืขื’ืœืขืš ืฆื• ืขืœื™ืžื™ื ื™ืจืŸ ืœื™ืงืก ื“ื•ืจืš ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ื˜ืฉืึทื ืึทืœื– ืึธืŸ ื‘ืจื™ื™ืงื™ื ื’ ืฆื•ืจื™ืง ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืื™ืŸ ืงืจืึทื ื˜ ืคึผืจืึธื˜ืึธืงืึธืœ ื•ื•ืขืจืกื™ืขืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’