Vulnerabilities > CVE-2008-5230 - Cryptographic Issues vulnerability in Cisco IOS

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
cisco
CWE-310
NVD
Published: 2008-11-25
Updated: 2008-12-03

Summary

The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packets from an access point (AP) to a client and spoof packets from an AP to a client, and conduct ARP poisoning attacks or other attacks, as demonstrated by tkiptun-ng. The impact of this vulnerability has yet to be determined. The full list of affected platforms is subject to change. The NVD will continue to monitor this vulnerability and adjust the configurations as needed.

Vulnerable Configurations

Part Description Count
OS
Cisco
1

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Signature Spoofing by Key Recreation
    An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.

Seebug

bulletinFamilyexploit
descriptionBUGTRAQ ID: 32164 CVE(CAN) ID: CVE-2008-5230 WPA加密即Wi-Fi Protected Access，是无线网络广泛使用的加密标准。 很多对Wi-Fi网络使用WPA和WPA2加密的产品没有安全地实现临时密钥完整性协议（TKIP），如果远程攻击者发送了特制的回放报文的话，就可能较容易的破解从AP发送给客户端的报文，然后执行ARP欺骗或其他攻击。 请注意这种攻击不是密钥恢复攻击，攻击者仅可以恢复用于认证报文的密钥而不是用于加密和混淆数据的密钥，且仅可以通过恢复的密钥伪造抓包到的报文，最多有7次尝试的窗口机会。每次攻击只能解密一个报文，所耗费的时间大约为12-15分钟。 Wi-Fi Alliance WPA Wi-Fi Alliance -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： <a href=http://www.wi-fi.org/knowledge_center/wpa target=_blank>http://www.wi-fi.org/knowledge_center/wpa</a>
idSSV:4506
last seen2017-11-19
modified2008-11-30
published2008-11-30
reporterRoot
sourcehttps://www.seebug.org/vuldb/ssvid-4506
titleWPA加密标准TKIP密钥破解漏洞

References