Millions of Amazon Echo and Kindle Devices Affected by WiFi Vulnerability called KRACK

guest · Oct 17, 2019

Millions of Amazon Echo and Kindle Devices Affected by WiFi Bug
October 17, 2019
https://www.bleepingcomputer.com/ne...echo-and-kindle-devices-affected-by-wifi-bug/

KRACK, or Key Reinstallation Attack, is a vulnerability in the 4-way handshake of the WPA2 protocol that was disclosed in October 2017 by security researchers Mathy Vanhoef and Frank Piessens.
Using this attack, bad actors can decrypt packets sent by clients in order to steal sensitive information that is sent over plain text.
Older Amazon devices are affected
In a report by the ESET Smart Home Research Team, the researchers have discovered that Amazon Echo 1st generation and Amazon Kindle 8th generation devices were still affected by the KRACK vulnerability.
When performing tests against the older Echo and Kindle devices, ESET discovered that the devices were vulnerable to the KRACK four-way handshake CVE-2017-13077 and CVE-2017-13078 vulnerabilities.

"The Echo 1st generation and Amazon Kindle 8th generation devices were found to be vulnerable to two KRACK vulnerabilities", ESET researchers stated in their report.
Click to expand...

Security update released for affected Amazon devices
ESET responsibly disclosed these bugs to Amazon on October 23rd, 2018 and was told that Amazon would look into the issues.

On January 8th, 2019, Amazon stated that they could replicate the bugs and had prepared patches that would be pushed out to affected devices in the coming weeks. This patch would come in the form of a new wpa_supplicant, which is a small program that controls the wireless protocols on the device.
Most users should have this update already installed for quite some time, but it is strongly advised that all users go into their Echo and Kindle settings and make sure they are using the latest firmware.
Click to expand...

ESET: What was wrong with Alexa? How Amazon Echo and Kindle got KRACKed

Log in or Sign up

Millions of Amazon Echo and Kindle Devices Affected by WiFi Vulnerability called KRACK

guest Guest

Log in or Sign up

Millions of Amazon Echo and Kindle Devices Affected by WiFi Vulnerability called KRACK

guest Guest

Useful Searches