Vulnerability in Wireless Router Chipsets Prompts Advisory

guest · Sep 30, 2020

Vulnerability in Wireless Router Chipsets Prompts Advisory
September 29, 2020
https://www.darkreading.com/vulnera...ter-chipsets-prompts-advisory/d/d-id/1339032?

Synopsys has issued an advisory warning of authentication bypass vulnerabilities in multiple wireless router chipsets built into devices manufactured by Qualcomm, MediaTek, and Realtek.

CVE-2019-18989, CVE-2019-18990, and CVE-2019-18991 refer to a partial authentication bypass vulnerability affecting multiple products from these manufacturers.
This would enable an attacker to inject packets into a WPA2-protected network without any knowledge of the preshared key.

In response to the vulnerability, MediaTek and Realtek say patches will be made available upon request. Qualcomm says the identified chipsets have all reached end of life and have been discontinued; this issue does not affect currently supported chipsets, the company says.
Click to expand...

Synopsys contacted all manufacturers behind tested devices as part of the disclosure process. Both D-Link and Zyxel have confirmed patches with a fix exist and will be made available.
Read the full advisory and analysis for more details.
Click to expand...

Log in or Sign up

Vulnerability in Wireless Router Chipsets Prompts Advisory

guest Guest

Log in or Sign up

Vulnerability in Wireless Router Chipsets Prompts Advisory

guest Guest

Useful Searches