Your iPhone's WiFi will break after you join this hotspot

guest · Jun 19, 2021

Your iPhone's WiFi will break after you join this hotspot
June 19, 2021
https://www.bleepingcomputer.com/ne...-wifi-will-break-after-you-join-this-hotspot/

A new iPhone bug has come to light that breaks your iPhone's wireless functionality by merely connecting to a specific WiFi hotspot.
Once triggered, the bug would render your iPhone unable to establish a WiFi connection, even if it is rebooted or the WiFi hotspot is renamed.

A bug like this could be exploited by malicious actors planting rogue "free WiFi" hotspots in popular areas to bork iPhone devices connecting to them.
Click to expand...

This WiFi hotspot will bork your iPhone
"After joining my personal WiFi with the SSID '%p%s%s%s%s%n', my iPhone permanently disabled it’s WiFi functionality. Neither rebooting nor changing SSID fixes it :~)," tweeted Schou.

Schou told BleepingComputer that his experiment worked successfully on an iPhone XS, running iOS version 14.4.2.
Click to expand...

Other security researchers who saw Schou's tweet believe that an input parsing issue likely causes this bug.

The only way to fix our iPhone's broken Wi-Fi feature was to reset the device's iPhone network settings, which we describe how to do at the end of the article.
BleepingComputer has reached out to Apple for comment before publishing, and we are awaiting their response.
Click to expand...

guest · Jul 20, 2021

Researchers: Apple Quietly Patched 0-Click Wi-Fi Code Execution Vulnerability in iOS
July 20, 2021
https://www.securityweek.com/resear...-click-wi-fi-code-execution-vulnerability-ios

The issue was initially brought to light last month, when reverse engineer Carl Schou discovered that the Wi-Fi functionality on his iPhone would completely crash when connecting to a hotspot that had the SSID “%p%s%s%s%s%n.”

Wi-Fi would continuously restart even after disconnecting from the hotspot, with the functionality being restored only after resetting the network connection settings on the device.
The issue, which impacts all iOS devices running iOS 14.0 to 14.6, was deemed to be a format string bug, where iOS is considering the characters that follow “%” as string-format specifiers, meaning that they are processed as commands, rather than text.
Click to expand...

According to security researchers with the ZecOps Mobile EDR Research team, however, the implications of the bug are deeper, as it could be exploited to achieve remote code execution without any interaction from the user.

To achieve remote code execution, the researchers say, the targeted device needs to have WiFi enabled and set to Auto-Join (the feature is enabled by default), for the device to be running a vulnerable iOS version, and for it to be in the proximity of a Wi-Fi access point that has a tailored name to trigger the bug.
Click to expand...

Apple silently patched the vulnerability in iOS 14.4, without assigning a CVE. However, the bug can still be abused to crash the Wi-Fi on devices running iOS 14.0 to iOS 14.6, leading to a denial of service condition, the researchers say.
Click to expand...

guest · Jul 23, 2021

Apple fixes bug that breaks iPhone WiFi when joining rogue hotspots
July 23, 2021
https://www.bleepingcomputer.com/ne...eaks-iphone-wifi-when-joining-rogue-hotspots/

Apple has rolled out security updates to address dozens of iOS and macOS vulnerabilities, including a severe iOS bug dubbed WiFiDemon that could lead to denial of service or arbitrary code execution.

The vulnerability, tracked as CVE-2021-30800 and a zero-day bug when security researcher Carl Schou publicly disclosed it, was fixed by Apple with the release of iOS 14.7 earlier this week.
Successful exploitation would make it possible to break an iPhone's Wi-Fi functionality on joining hotspots with SSIDs containing the "%" character (i.e., %p%s%s%s%s%n).
Zero-click RCE risks on older iOS versions
As ZecOps later found, threat actors could also execute arbitrary code without user interaction when unpatched devices joined a rogue Wi-Fi hotspot with a maliciously crafted SSID containing the "%@" character (i.e., DDDD%x%x%x%@)
Click to expand...

The bug impacts iPhone 6s and later, all iPad Pro models, iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation), as Apple revealed in a security advisory published earlier this week.
Click to expand...

EASTER · Jul 23, 2021

mood said: ↑

Apple fixes bug that breaks iPhone WiFi when joining rogue hotspots
July 23, 2021
https://www.bleepingcomputer.com/ne...eaks-iphone-wifi-when-joining-rogue-hotspots/
Click to expand...

That was a close one. Good thing it breaks fumctionality so it could be reported and zipped up with a 'fix'. Android has it's own burps

Log in or Sign up

Your iPhone's WiFi will break after you join this hotspot

guest Guest

guest Guest

guest Guest

EASTER Registered Member

Log in or Sign up

Your iPhone's WiFi will break after you join this hotspot

guest Guest

guest Guest

guest Guest

EASTER Registered Member

Useful Searches