Multiple Wireless Routers Predictable Default WEP/WPA Key Security Bypass Vulnerability
BID:28893
Info
Multiple Wireless Routers Predictable Default WEP/WPA Key Security Bypass Vulnerability
| Bugtraq ID: | 28893 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 22 2008 12:00AM |
| Updated: | Apr 23 2008 04:47PM |
| Credit: | Kevin Devine |
| Vulnerable: |
Thomson SpeedTouch 0 BT Home Hub 0 |
| Not Vulnerable: | |
Discussion
Exploit / POC
Multiple Wireless Routers Predictable Default WEP/WPA Key Security Bypass Vulnerability
To exploit this issue, an attacker can use a browser. To predict the default encryption keys, the attacker can use readily available tools.
See the references for a document that describes the algorithm used to generate default SSIDs and encryption keys.
To exploit this issue, an attacker can use a browser. To predict the default encryption keys, the attacker can use readily available tools.
See the references for a document that describes the algorithm used to generate default SSIDs and encryption keys.
Solution / Fix
Multiple Wireless Routers Predictable Default WEP/WPA Key Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple Wireless Routers Predictable Default WEP/WPA Key Security Bypass Vulnerability
References:
References:
- BT Home Hub (BT)
- Default key algorithm in Thomson and BT Home Hub routers (GNUCITIZEN)
- Thomson Homepage (Thomson Broadband)
- Default key algorithm in Thomson and BT Home Hub routers ("Adrian Pastor"