Wi-Fi Protected Access (WPA) Encryption Standard TKIP Encryption Bypass Vulnerability
BID:32164
Info
Wi-Fi Protected Access (WPA) Encryption Standard TKIP Encryption Bypass Vulnerability
| Bugtraq ID: | 32164 |
| Class: | Unknown |
| CVE: |
CVE-2008-5230 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 06 2008 12:00AM |
| Updated: | May 07 2015 05:21PM |
| Credit: | Erik Tews and Martin Beck |
| Vulnerable: |
Wi-Fi Alliance WPA (Wi-Fi Protected Access) 0 |
| Not Vulnerable: | |
Discussion
Wi-Fi Protected Access (WPA) Encryption Standard TKIP Encryption Bypass Vulnerability
Wi-Fi Protected Access (WPA) Encryption Standard is prone to an encryption-bypass vulnerability that affects the Temporal Key Integrity Protocol (TKIP) key.
Attackers can exploit this issue to overcome the WPA encryption algorithm and read encrypted data sent from a wireless router to a computer. This may allow attackers to obtain potentially sensitive information; other attacks are also possible.
Wi-Fi Protected Access (WPA) Encryption Standard is prone to an encryption-bypass vulnerability that affects the Temporal Key Integrity Protocol (TKIP) key.
Attackers can exploit this issue to overcome the WPA encryption algorithm and read encrypted data sent from a wireless router to a computer. This may allow attackers to obtain potentially sensitive information; other attacks are also possible.
Exploit / POC
Wi-Fi Protected Access (WPA) Encryption Standard TKIP Encryption Bypass Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Wi-Fi Protected Access (WPA) Encryption Standard TKIP Encryption Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Wi-Fi Protected Access (WPA) Encryption Standard TKIP Encryption Bypass Vulnerability
References:
References:
- Once thought safe, WPA Wi-Fi encryption is cracked (Roebert McMillan)
- WPA (Wi-Fi Protected Access) Homepage (Wi-Fi Alliance)
- Cisco Security Response: Cisco Response to TKIP Encryption Weakness (Cisco)