Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chips

Related Vulnerabilities: CVE-2019-15126   CVE-2019-15126  

There is an information disclosure vulnerability named Kr00k in Broadcom Wi-Fi chips. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic. (Vulnerability ID: HWPSIRT-2020-02164) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-15126. Huawei has released software updates to fix this vulnerability. This advisory is available at the following link: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en

Source
Corporate Worldwide Log in My Huawei Log out

Buy

Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chips

  • SA No:huawei-sa-20200527-01-wifi
  • Initial Release Date: May 27, 2020
  • Last Release Date: Jul 17, 2020

There is an information disclosure vulnerability named Kr00k in Broadcom Wi-Fi chips. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic. (Vulnerability ID: HWPSIRT-2020-02164)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-15126.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en

Product Name

Affected Version

Resolved Product and Version

AP7030DE

V200R005C20

V200R019C00SPC800

V200R006C00

V200R006C10

V200R006C20

AP7000 V200R019C00SPC800

V200R007C10

V200R007C20

V200R008C00

V200R008C10

V200R010C00

V200R019C00

AP9330DN

V200R005C20

AP9000 V200R019C00SPC800

V200R006C00

V200R006C10

V200R006C20

V200R007C10

V200R007C20

V200R008C00

V200R008C10

V200R010C00

V200R019C00SPC800

V200R019C00


By exploiting this vulnerability, an attacker may cause information disclosure.

The vulnerability classification has been performed by using the CVSSv3 scoring system (http://www.first.org/cvss/specification-document).

Base Score: 3.1 (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Temporal Score: 2.9 (E:F/RL:O/RC:C)

This vulnerability can be exploited only when the following conditions are present:

The attacker gains access to the adjacent network.

Vulnerability details:

There is an information disclosure vulnerability named Kr00k in Broadcom Wi-Fi chips. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic.

None


Customers should contact Huawei TAC (Huawei Technical Assistance Center) to request the upgrades. For TAC contact information, please refer to Huawei worldwide website at http://www.huawei.com/en/psirt/report-vulnerabilities.

This vulnerability was publicly disclosed.

2020-07-17 V1.1 UPDATED Updated the "Software Versions and Fixes" section;

2020-05-27 V1.0 INITIAL

None

This document is provided on an "AS IS" basis and does not imply any kind of guarantee or warranty, either express or implied, including the warranties of merchantability or fitness for a particular purpose. In no event shall Huawei or any of its directly or indirectly controlled subsidiaries or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. Your use of the document, by whatsoever means, will be totally at your own risk. Huawei is entitled to amend or update this document from time to time.

Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chips

  • SA No:huawei-sa-20200527-01-wifi
  • Initial Release Date: May 27, 2020
  • Last Release Date: Jul 17, 2020

There is an information disclosure vulnerability named Kr00k in Broadcom Wi-Fi chips. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic. (Vulnerability ID: HWPSIRT-2020-02164)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-15126.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en

Product Name

Affected Version

Resolved Product and Version

AP7030DE

V200R005C20

V200R019C00SPC800

V200R006C00

V200R006C10

V200R006C20

AP7000 V200R019C00SPC800

V200R007C10

V200R007C20

V200R008C00

V200R008C10

V200R010C00

V200R019C00

AP9330DN

V200R005C20

AP9000 V200R019C00SPC800

V200R006C00

V200R006C10

V200R006C20

V200R007C10

V200R007C20

V200R008C00

V200R008C10

V200R010C00

V200R019C00SPC800

V200R019C00


By exploiting this vulnerability, an attacker may cause information disclosure.

The vulnerability classification has been performed by using the CVSSv3 scoring system (http://www.first.org/cvss/specification-document).

Base Score: 3.1 (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Temporal Score: 2.9 (E:F/RL:O/RC:C)

This vulnerability can be exploited only when the following conditions are present:

The attacker gains access to the adjacent network.

Vulnerability details:

There is an information disclosure vulnerability named Kr00k in Broadcom Wi-Fi chips. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic.

None


Customers should contact Huawei TAC (Huawei Technical Assistance Center) to request the upgrades. For TAC contact information, please refer to Huawei worldwide website at http://www.huawei.com/en/psirt/report-vulnerabilities.

This vulnerability was publicly disclosed.

2020-07-17 V1.1 UPDATED Updated the "Software Versions and Fixes" section;

2020-05-27 V1.0 INITIAL

None

This document is provided on an "AS IS" basis and does not imply any kind of guarantee or warranty, either express or implied, including the warranties of merchantability or fitness for a particular purpose. In no event shall Huawei or any of its directly or indirectly controlled subsidiaries or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. Your use of the document, by whatsoever means, will be totally at your own risk. Huawei is entitled to amend or update this document from time to time.

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started