Firmware and Wireless - Cyber Security Informer

Wireless Security: WEP, WPA, WPA2 and WPA3 Explained

eSecurity Planet

MARCH 1, 2023

Wireless security is the protection of wireless networks, devices and data from unwanted access and breaches. It involves a variety of strategies and practices designed to preserve the confidentiality, integrity and availability of wireless networks and their resources. What is Wireless Security?

Wireless

Wireless Encryption Authentication IoT

EU to Force IoT, Wireless Device Makers to Improve Security

eSecurity Planet

NOVEMBER 1, 2021

The European Union is poised to place more demands on manufacturers to design greater security into their wireless and Internet of Things (IoT) devices. The goal of the amendment – called a “delegated act” – is to ensure that all wireless devices are safe before they are sold in the EU. It’s never one and done,” Broomhead said.

Wireless

Wireless IoT Manufacturing Mobile

Apple Patches Bluetooth Flaw in AirPods, Beats

Dark Reading

MAY 5, 2023

Users can check for the updated firmware version of their wireless headphones in the Bluetooth settings of their iPhone, iPad, or Mac devices.

Wireless

Wireless Firmware

NETGEAR fixes a severe bug in its routers. Patch it asap!

Security Affairs

DECEMBER 30, 2022

Netgear addressed a high-severity bug affecting multiple WiFi router models, including Wireless AC Nighthawk , Wireless AX Nighthawk (WiFi 6) , and Wireless AC. Netgear fixed a bug affecting multiple WiFi router models, including Wireless AC Nighthawk , Wireless AX Nighthawk (WiFi 6) , and Wireless AC router models.

Firmware

Firmware Wireless Authentication Hacking

5 Ways to Ensure Home Router Security with a Remote Workforce

Adam Levin

MARCH 19, 2020

Update the Firmware: Router manufacturers are constantly issuing updates and patches for newly discovered firmware vulnerabilities. If an employee hasn’t updated their router firmware since the day they bought it, chances are there are some security holes that need to be addressed.

Wireless

Wireless Firmware Firewall Manufacturing

Flaws in Realtek RTL8170C Wi-Fi module allow hijacking wireless communications

Security Affairs

JUNE 3, 2021

Researchers found multiple flaws in the Realtek RTL8170C Wi-Fi module that could be exploited to elevate privileges and hijack wireless communications. Researchers from Israeli IoT security firm Vdoo found multiple vulnerabilities in the Realtek RTL8170C Wi-Fi module that could allow to elevate privileges and hijack wireless communications.

Wireless

Wireless IoT Encryption Firmware

Tenable experts found 15 flaws in wireless presentation systems

Security Affairs

MAY 2, 2019

Experts at Tenable discovered 15 vulnerabilities in eight wireless presentation systems, including flaws that can be exploited to remotely hack devices. Wireless presentation systems are used to display content on a screen or through several devices, including mobile devices and laptops. ” reads the analysis published by Tenable.

Wireless

Wireless Firmware Advertising Authentication

Experts show how to run malware on chips of a turned-off iPhone

Security Affairs

MAY 16, 2022

Researchers devised an attack technique to tamper the firmware and execute a malware onto a Bluetooth chip when an iPhone is “off.” ” Experts pointed out that when an iPhone is turned off, most wireless chips (Bluetooth, Near Field Communication (NFC), and Ultra-wideband (UWB)) continue to operate. .”

Malware

Malware Wireless Firmware Mobile

D-Link releases a security firmware update that only fixes 3 out 6 issues in DIR-865L home routers

Security Affairs

JUNE 13, 2020

D-Link has released a firmware update to address three security flaws impacting the DIR-865L home router model, but left some issue unpatched. D-Link has recently released a firmware update to address three out of six security flaws impacting the DIR-865L wireless home router. D-Link’s DIR-865L is no longer supported for U.S.

Firmware

Firmware Wireless Advertising Risk

Researchers Find Potential Way to Run Malware on iPhone Even When it's OFF

The Hacker News

MAY 16, 2022

A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off."

Malware

Malware Wireless Firmware

ASUS addressed critical flaws in some router models

Security Affairs

JUNE 19, 2023

ASUS addressed critical vulnerabilities in multiple router models, urging customers to immediately install firmware updates. ASUS is warning customers to update some router models to the latest firmware to address critical vulnerabilities. “Update your router to the latest firmware.

Firmware

Firmware VPN Wireless Passwords

InfectedSlurs botnet targets QNAP VioStor NVR vulnerability

Security Affairs

DECEMBER 17, 2023

A close look at the ongoing campaign revealed that the bot also targets wireless LAN routers built for hotels and residential applications. that impacted several routers, including Future X Communications (FXC) AE1021 and AE1021PE wall routers, running firmware versions 2.0.9 and earlier. and earlier (5.0.0 released June 21, 2014).

Firmware

Firmware Wireless DDOS IoT

Experts warn of critical flaws in Flexlan devices that provide WiFi on airplanes

Security Affairs

SEPTEMBER 19, 2022

The FXA3000 and FXA2000 Series are access points that are manufactured by Japan-based firm Contec that conform to IEEE 802.11n/a/b/g wireless. “It is found that our wireless products, FLEXLAN FX3000/2000 series, have a firmware vulnerability. . ” reads the advisory published by Contec.

Wireless

Wireless Firmware Passwords Engineering

Practical coexistence attacks on billions of WiFi chips allow data theft and traffic manipulation

Security Affairs

DECEMBER 13, 2021

According to the research paper published by the experts, modern mobile devices use separate wireless chips to manage wireless technologies, such as Bluetooth, Wi-Fi, and LTE. The researchers explained that it is possible to use these shared resources to launch lateral privilege escalation attacks across wireless chip boundaries.

Wireless

Wireless Firmware Mobile Passwords

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Security Affairs

JULY 17, 2021

Network equipment vendor D-Link has released a firmware hotfix to fix multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Network equipment vendor D-Link has released a firmware hotfix to address multiple vulnerabilities affecting the DIR-3040 AC3000-based wireless internet router.

Firmware

Firmware Wireless Passwords Internet

Fortinet FortiWLM Deep-Dive, IOCs, and the Almost Story of the “Forti Forty”

Security Boulevard

MARCH 14, 2024

Fortinet seemed like a decent place to start given the variety of lesser-known security appliances I had noticed while searching for the FortiNAC firmware. The first target I landed on was the Fortinet Wireless LAN Manager (WLM).

Wireless

Wireless Firmware Authentication

Remotely Accessing Secure Kali Pi

Kali Linux

NOVEMBER 27, 2022

Overview While wired networking in the initramfs does not require a lot of extras, wireless has a few more moving parts. Overview While wired networking in the initramfs does not require a lot of extras, wireless has a few more moving parts. Interface Name First, we need to know what our wireless interface is called.

Firmware

Firmware Wireless Passwords VPN

Be aware of exposure of sensitive data on Wi-Fi settings for Canon inkjet printers

Security Affairs

AUGUST 1, 2023

Keep the printer’s firmware and software up to date and disable unnecessary services or protocols on the printer that are not required for its intended function. This isolates it from sensitive systems and data, reducing the impact of a compromise.

Wireless

Wireless Passwords Firmware Authentication

Netgear fixes a critical RCE that could allow to takeover Flagship Nighthawk routers

Security Affairs

MARCH 8, 2020

Netgear is warning users of a critical remote code execution flaw that could allow an unauthenticated attacker to take control of its wireless routers. “NETGEAR has released fixes for a unauthenticated remote code execution security vulnerability on the following product models: R7800, running firmware versions prior to 1.0.2.68.

Firmware

Firmware Wireless Advertising Authentication

Cisco fixes critical remote code execution issues in SMB VPN routers

Security Affairs

FEBRUARY 4, 2021

.” The IT giant revealed that the vulnerabilities affect the following Cisco Small Business Routers if they are running a firmware release earlier than Release 1.0.01.02: RV160 VPN Router RV160W Wireless-AC VPN Router RV260 VPN Router RV260P VPN Router with POE RV260W Wireless-AC VPN Router.

VPN

VPN Small Business Wireless Firmware

How to Configure a Router to Use WPA2 in 7 Easy Steps

eSecurity Planet

MARCH 3, 2023

WPA2 is a security protocol that secures wireless networks using the advanced encryption standard (AES). WEP and WPA are both under 4%, while WPA2 commands a 73% share of known wireless encryption connections. If this option is not available, you may need to upgrade the router firmware.

Wireless

Wireless Encryption Passwords IoT

CVE-2021-20090 actively exploited to target millions of IoT devices worldwide

Security Affairs

AUGUST 7, 2021

Threat actors are actively exploiting a critical authentication bypass issue (CVE-2021-20090 ) affecting home routers with Arcadyan firmware. Threat actors actively exploit a critical authentication bypass vulnerability, tracked as CVE-2021-20090 , impacting home routers with Arcadyan firmware to deploy a Mirai bot.

IoT

IoT Firmware Authentication Wireless

BotenaGo botnet targets millions of IoT devices using 33 exploits

Security Affairs

NOVEMBER 11, 2021

Below is the list of exploits used by the bot: Vulnerability Affected devices CVE-2020-8515 DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices CVE-2015-2051 D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier CVE-2016-1555 Netgear WN604 before 3.3.3

IoT

IoT Firmware Malware Wireless

Friends Don't Let Friends Use Dodgy WiFi: Introducing Ubiquiti's Dream Machine and FlexHD

Troy Hunt

MARCH 12, 2020

I bought a security gateway to do DHCP, a couple of switches for all my connected things, 5 access points for my wireless things and a Cloud Key to control them all. There was a firmware update pending too so I took that and that was the end of the story. I went overboard and I don't regret it one bit!

Wireless

Wireless Firmware Accountability Mobile

Canada revisits decision to ban Flipper Zero

Malwarebytes

MARCH 22, 2024

The Flipper Zero is a portable device that can be used in penetration testing with a focus on wireless devices and access control systems. Flipper Zero made headlines in October because versions running third-party firmware could be used to crash iPhones running iOS 17 (since resolved in iOS 17.2).

Penetration Testing

Penetration Testing Wireless Firmware Retail

Sierra Wireless Patches Critical Vulns in Range of Wireless Routers

Threatpost

MAY 8, 2018

The flaws would leave the enterprise devices helpless to a range of remote threats, including the charms of the Reaper IoT botnet.

Wireless

Wireless IoT Firmware Mobile

Zyxel fixed firewall unauthenticated remote command injection issue

Security Affairs

MAY 13, 2022

Below is the list of vulnerable products and related patches: Affected model Affected firmware version Patch availability USG FLEX 100(W), 200, 500, 700 ZLD V5.00 If possible, enable automatic firmware updates. Commands are executed as the nobody user.” ” reads the report published by Rapid7. through ZLD V5.21

Firewall

Firewall Firmware VPN Wireless

D-Link Routers at Risk for Remote Takeover from Zero-Day Flaws

Threatpost

DECEMBER 9, 2020

Critical vulnerabilities discovered by Digital Defense can allow attackers to gain root access and take over devices running same firmware.

Firmware

Firmware Risk Wireless Internet

Infecting Canon EOS DSLR camera with ransomware over the air

Security Affairs

AUGUST 12, 2019

The expert explained that the attackers can set up a rogue WiFi access point and exploit wireless connection feature of the Canon EOS 80D DSLR cameras, another scenario sees attacker compromising the device through the PC it connects to. Owners of Canon EOS 80D DSLR can address the issues by installing the firmware version 1.0.3.

Firmware

Firmware Ransomware Wireless Encryption

A week in security (July 19 – August 1)

Malwarebytes

AUGUST 2, 2021

UDP Technology IP Camera firmware vulnerabilities allow for attacker to achieve root. Source: The New York Times) NSA issues guidance on securing wireless devices in public settings. The Clubhouse database “breach” is likely a non-breach. Here’s why. The Olympics : a timeline of scams, hacks, and malware. So is the tracking they allow.

Wireless

Wireless Password Management Firmware Passwords

Android vulnerabilities could allow arbitrary code execution

Malwarebytes

OCTOBER 6, 2022

Qualcomm is a US-based chip maker that specializes in semiconductors, software, and services related to wireless technology. Looking at the three vulnerabilities listed above it seems that someone has taken a good look at the initial connection and authentication routines inn the Qualcomm WLAN firmware.

Wireless

Wireless Mobile Encryption Firmware

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

Security Affairs

FEBRUARY 6, 2020

based specification for a suite of high-level communication protocols used to create personal area networks with small, low-power digital radios, such as for home automation, medical device data collection, and other low-power low-bandwidth needs, designed for small scale projects which need wireless connection. ZigBee is an IEEE 802.15.4-based

Hacking

Hacking IoT Wireless Firmware

Realtek SDK flaws exploited to deliver Mirai bot variant

Security Affairs

AUGUST 24, 2021

On August 15, firmware security company IoT Inspector published details about the flaws. Affected devices implement wireless capabilities and cover a wide spectrum of use cases: from residential gateways, travel routers, Wi-Fi repeaters, IP cameras to smart lightning gateways or even connected toys.”

IoT

IoT Firmware Internet Internet

A Device to Turn Traffic Lights Green

Schneier on Security

FEBRUARY 22, 2023

As mentioned earlier, the Flipper Zero has a built-in sub-GHz radio that lets the device receive data (or transmit it, with the right firmware in approved regions) on the same wireless frequencies as keyfobs and other devices.

Wireless

Wireless Firmware Mobile Technology

10,000+ unpatched ABUS Secvest home alarms can be deactivated remotely

Security Affairs

APRIL 25, 2021

“The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Unfortunately, experts noticed that more than 90% of the installs are still using flawed firmware versions and have yet to install the security updates (V3.01.21) provided by the vendor.

Firmware

Firmware Passwords Authentication Wireless

After Log4j, December’s Patch Tuesday has snuck up on us

Malwarebytes

DECEMBER 16, 2021

CVE-2021-43899 Microsoft 4K Wireless Display Adapter Remote Code Execution vulnerability. You will need to install the Microsoft Wireless Display Adapter app from the Microsoft Store onto a system connected to the Microsoft 4K Wireless Display Adapter. This vulnerability was rated 9.6 This vulnerability was rated 9.8

Wireless

Wireless Passwords Firmware Authentication

Expert found multiple critical issues in MoFi routers

Security Affairs

SEPTEMBER 8, 2020

. “Multiple critical vulnerabilities have been discovered in the MoFi4500 router, an OpenWRT based wireless router that provides Internet access via LTE. “Several firmware versions have been released, but some of the vulnerabilities have not been fully patched.” ” continues the report.

Firmware

Firmware Wireless Authentication Advertising

Cisco discloses high-severity flaw impacting IP Phone 7800 and 8800 Series

Security Affairs

DECEMBER 9, 2022

Cisco disclosed a high-severity vulnerability, tracked as CVE-2022-20968, impacting its IP Phone 7800 and 8800 Series (except Cisco Wireless IP Phone 8821). Cisco disclosed a high-severity flaw in its IP phones that can be exploited to gain remote code execution and conduct DoS attacks. ” reads the advisory published by the company.

Wireless

Wireless Firmware Hacking Information Security

Some Zyxel devices can be hacked via DNS requests

Security Affairs

SEPTEMBER 4, 2019

An FTP service runs on the Zyxel wireless access point that contains the configuration file for the WiFi network. This FTP server can be accessed with hardcoded credentials that are embedded in the firmware of the AP. Zyxel customers have to install the patches and firmware updates released by the vendor for their devices.

DNS

DNS Hacking Firmware Wireless

"In our modern world, countless applications rely on radio frequency elements" - an Interview with Larbi Ouiyzme

Pen Test

OCTOBER 12, 2023

Here are some key details: Advanced Encryption Standard (AES): AES is a widely adopted symmetric-key encryption algorithm used in many RF systems, especially in Wi-Fi and other wireless communication protocols. It provides a high level of security for wireless network communications. Ensuring the security of OTA upgrades is crucial.

Encryption

Encryption Firmware Surveillance Technology

Beyond the Office: Securing Home Devices and Networks Against Corporate Breaches

SecureWorld News

OCTOBER 8, 2023

Use the administrator account only for maintenance, software installation, or firmware updates. Attention should be paid to protecting routers and updating their firmware. While OS updates are now commonly practiced, router firmware updates remain an overlooked aspect. Opt for strong, hard-to-crack passwords.

Firmware

Firmware IoT Accountability Passwords

Counterfeit versions of popular mobile devices target WhatsApp and WhatsApp Business

Security Affairs

AUGUST 23, 2022

.” If the wpa_supplicant system app (which allows controlling wireless connections) was involved in the launch of the backdoor, Android.BackDoor.3104 It allows a remote or local client to connect and operate in the “mysh” console application, which must first be installed on the device or initially present in its firmware.

Mobile

Mobile Firmware Malware Wireless

Experts released PoC exploits for severe flaws in Netgear Orbi routers

Security Affairs

MARCH 22, 2023

The experts discovered four vulnerabilities in the Netgear Orbi mesh wireless system, the most critical one is a critical remote code vulnerability, tracked as CVE-2022-37337 (CVSS v3.1: Netgear addressed the flaws with the release of the firmware version 4.6.14.3 ” states Talos. on January 19, 2023.

Wireless

Wireless Firmware Authentication Passwords

Cisco addresses critical issues in IP Phones and UCS Director

Security Affairs

APRIL 17, 2020

The issue affects the following Cisco products if they have web access enabled and are running a firmware release earlier than the first fixed release for that device: IP Phone 7811, 7821, 7841, and 7861 Desktop Phones IP Phone 8811, 8841, 8845, 8851, 8861, and 8865 Desktop Phones Unified IP Conference Phone 8831 Wireless IP Phone 8821 and 8821-EX.

Big data

Big data Wireless Advertising Firmware

Wireless Security: WEP, WPA, WPA2 and WPA3 Explained

EU to Force IoT, Wireless Device Makers to Improve Security

Trending Sources

Apple Patches Bluetooth Flaw in AirPods, Beats

NETGEAR fixes a severe bug in its routers. Patch it asap!

5 Ways to Ensure Home Router Security with a Remote Workforce

Flaws in Realtek RTL8170C Wi-Fi module allow hijacking wireless communications

Tenable experts found 15 flaws in wireless presentation systems

Experts show how to run malware on chips of a turned-off iPhone

D-Link releases a security firmware update that only fixes 3 out 6 issues in DIR-865L home routers

Researchers Find Potential Way to Run Malware on iPhone Even When it's OFF

ASUS addressed critical flaws in some router models

InfectedSlurs botnet targets QNAP VioStor NVR vulnerability

Experts warn of critical flaws in Flexlan devices that provide WiFi on airplanes

Practical coexistence attacks on billions of WiFi chips allow data theft and traffic manipulation

D-Link issues beta hotfix for multiple flaws in DIR-3040 routers

Fortinet FortiWLM Deep-Dive, IOCs, and the Almost Story of the “Forti Forty”

Remotely Accessing Secure Kali Pi

Be aware of exposure of sensitive data on Wi-Fi settings for Canon inkjet printers

Netgear fixes a critical RCE that could allow to takeover Flagship Nighthawk routers

Cisco fixes critical remote code execution issues in SMB VPN routers

How to Configure a Router to Use WPA2 in 7 Easy Steps

CVE-2021-20090 actively exploited to target millions of IoT devices worldwide

BotenaGo botnet targets millions of IoT devices using 33 exploits

Friends Don't Let Friends Use Dodgy WiFi: Introducing Ubiquiti's Dream Machine and FlexHD

Canada revisits decision to ban Flipper Zero

Sierra Wireless Patches Critical Vulns in Range of Wireless Routers

Zyxel fixed firewall unauthenticated remote command injection issue

D-Link Routers at Risk for Remote Takeover from Zero-Day Flaws

Infecting Canon EOS DSLR camera with ransomware over the air

A week in security (July 19 – August 1)

Android vulnerabilities could allow arbitrary code execution

Hacking Wi-Fi networks by exploiting a flaw in Philips Smart Light Bulbs

Realtek SDK flaws exploited to deliver Mirai bot variant

A Device to Turn Traffic Lights Green

10,000+ unpatched ABUS Secvest home alarms can be deactivated remotely

After Log4j, December’s Patch Tuesday has snuck up on us

Expert found multiple critical issues in MoFi routers

Cisco discloses high-severity flaw impacting IP Phone 7800 and 8800 Series

Some Zyxel devices can be hacked via DNS requests

"In our modern world, countless applications rely on radio frequency elements" - an Interview with Larbi Ouiyzme

Beyond the Office: Securing Home Devices and Networks Against Corporate Breaches

Counterfeit versions of popular mobile devices target WhatsApp and WhatsApp Business

Experts released PoC exploits for severe flaws in Netgear Orbi routers

Cisco addresses critical issues in IP Phones and UCS Director

Stay Connected