Impacted vendors have released security advisories in response to the recently disclosed Wi-Fi vulnerabilities collectively tracked as FragAttacks.
A dozen CVE identifiers have been assigned to the FragAttacks (fragmentation and aggregation attacks) flaws discovered last year by researcher Mathy Vanhoef, including three for design flaws and nine for implementation flaws.
Vanhoef tested 75 Wi-Fi devices and found that they were all affected by at least one vulnerability, but most of them were impacted by multiple issues. This suggests that a vast majority — if not all — devices with Wi-Fi capabilities are exposed to attacks. The design flaws are more difficult to exploit, while the implementation weaknesses are easier to use in attacks.
The researcher demonstrated that the vulnerabilities can allow an attacker who is within Wi-Fi range of the targeted device to conduct various activities, including redirect users to arbitrary websites, take control of devices on the network, bypass router firewalls, steal user information, and spy on victims.
Some of the affected vendors have been notified and given 9 months to release patches. Shortly after Vanhoef made his findings public, more than a dozen vendors released advisories, and some organizations, such as the Wi-Fi Alliance, have released statements on FragAttacks.
Some vendors say their products are affected only by the design flaws, but others appear to be impacted by multiple CVEs. Some companies noted that their products are affected due to the use of third-party components.
A majority of vendors have assigned the flaws a moderate/medium severity rating. Some have already released updates that should address the vulnerabilities, while others say they are working on developing patches.
Here is a list of vendors and other organizations that have released advisories and statements to date:
- Microsoft (CVE-2020-24588 and CVE-2020-24587)