Security News > 2021 > May > Nearly All Wi-Fi Devices Are Vulnerable to New FragAttacks

IEEE 802.11 provides the basis for all modern devices using the Wi-Fi family of network protocols, allowing laptops, tablets, printers, smartphones, smart speakers, and other devices to communicate with each other and access the Internet via a wireless router.

Introduced in January 2018, WPA3 is a third-generation security protocol that's at the heart of most Wi-Fi devices with several enhancements such as robust authentication and increased cryptographic strength to safeguard wireless computer networks.

CVE-2020-26144: Accepting plaintext A-MSDU frames that start with an RFC1042 header with EtherType EAPOL. CVE-2020-26140: Accepting plaintext data frames in a protected network.

A bad actor can leverage these flaws to inject arbitrary network packets, intercept and exfiltrate user data, launch denial-of-service attacks, and even possibly decrypt packets in WPA or WPA2 networks.

"If network packets can be injected towards an , the adversary can abuse this to bypass the NAT/firewall and directly connect to any device in the local network."

Mitigations for FragAttacks from other companies like Cisco, HPE/Aruba Networks, Juniper Networks, and Sierra Wireless can be accessed in the advisory released by the Industry Consortium for Advancement of Security on the Internet.

News URL

http://feedproxy.google.com/~r/TheHackersNews/~3/0zic0laJkTM/nearly-all-wifi-devices-are-vulnerable.html