KRACK Vulnerability and DD-WRT
From DD-WRT Wiki
(Difference between revisions)
Revision as of 08:47, 22 October 2017 (edit) Tmittelstaedt (Talk | contribs) (Informative page regarding KRACK vulnerability impact) ← Previous diff |
Revision as of 09:11, 22 October 2017 (edit) (undo) Tmittelstaedt (Talk | contribs) (→Overview) Next diff → |
||
Line 1: | Line 1: | ||
== Overview == | == Overview == | ||
- | The KRACK vulnerability was announced on 10/17/2017 and it is the most significant networking vulnerability since Heartbleed. It is documented here [https://www.krackattacks.com/] by it's finder. The vulnerability allows an attacker that is within wifi range of the Access Point and the wifi client to tap into | + | The KRACK vulnerability was announced on 10/17/2017 and it is the most significant networking vulnerability since Heartbleed. It is documented here [https://www.krackattacks.com/] by it's finder. The vulnerability allows an attacker that is within wifi range of the Access Point and the wifi client to tap into a connection made with WPA2 and see the unencrypted data going over it. |
+ | |||
+ | ==Extent of vulnerability== | ||
+ | |||
+ | Some of the locations that are affected: | ||
+ | |||
+ | * Inner city housing with residential homes close together. In many cities the average home can see dozens of SSID advertisements from neighbor's wifi router. | ||
+ | * Apartment buildings, multiplexes, duplexes and other shared housing situations | ||
+ | * Multi-tenant commercial buildings | ||
+ | * Coffee shops, airport waiting rooms, hotels | ||
+ | |||
+ | Types of WiFi access points and routers potentially affected: | ||
+ | |||
+ | * Any dd-wrt router running Brainslayer builds older than build 33525 (10/17/2017) or any obsolete builds (old Kong builds, Eko builds, and one-off builds such as the CrushedHat IPv6-in-4MB build as well as personal builds created by users from source before 10/17/2017 | ||
+ | * Any AP or router running any firmware released before 10/17/2017 | ||
+ | * ISP-supplied cable modems, DSL modems, and routers that have not been patched | ||
+ | * Devices running OpenWRT released before the vulnerability announced | ||
+ | * Wireless cellular "hotspot" devices such as the Verizon MiFi | ||
+ | * Cellular phones configured for tethering. | ||
+ | * Vehicle cellular devices that provide WiFi for vehicle occupants (some new cars do this) | ||
+ | |||
+ | Types of WiFi clients affected: | ||
+ | |||
+ | * All cellular phones running Android or iOS or Windows Phone that have not been patched. As of 10/22/2017 neither Apple or Google has released patches. | ||
+ | * Industrial scanning guns that use WiFi (handheld barcode scanners, etc.) | ||
+ | * Unpatched operating systems that the users have disabled automatic patching | ||
+ | * Obsolete operating systems (Windows XP, older MacOS X) |
Revision as of 09:11, 22 October 2017
Overview
The KRACK vulnerability was announced on 10/17/2017 and it is the most significant networking vulnerability since Heartbleed. It is documented here [1] by it's finder. The vulnerability allows an attacker that is within wifi range of the Access Point and the wifi client to tap into a connection made with WPA2 and see the unencrypted data going over it.
Extent of vulnerability
Some of the locations that are affected:
- Inner city housing with residential homes close together. In many cities the average home can see dozens of SSID advertisements from neighbor's wifi router.
- Apartment buildings, multiplexes, duplexes and other shared housing situations
- Multi-tenant commercial buildings
- Coffee shops, airport waiting rooms, hotels
Types of WiFi access points and routers potentially affected:
- Any dd-wrt router running Brainslayer builds older than build 33525 (10/17/2017) or any obsolete builds (old Kong builds, Eko builds, and one-off builds such as the CrushedHat IPv6-in-4MB build as well as personal builds created by users from source before 10/17/2017
- Any AP or router running any firmware released before 10/17/2017
- ISP-supplied cable modems, DSL modems, and routers that have not been patched
- Devices running OpenWRT released before the vulnerability announced
- Wireless cellular "hotspot" devices such as the Verizon MiFi
- Cellular phones configured for tethering.
- Vehicle cellular devices that provide WiFi for vehicle occupants (some new cars do this)
Types of WiFi clients affected:
- All cellular phones running Android or iOS or Windows Phone that have not been patched. As of 10/22/2017 neither Apple or Google has released patches.
- Industrial scanning guns that use WiFi (handheld barcode scanners, etc.)
- Unpatched operating systems that the users have disabled automatic patching
- Obsolete operating systems (Windows XP, older MacOS X)