CNVD-2015-04544

Vulnerability from cnvd - Published: 2015-07-15
VLAI Severity ?
Title
802.11n无线网络标准帧聚合机制存在未明漏洞
Description
802.11协议组是国际电工电子工程学会（IEEE）为无线局域网络制定的标准。802.11n是在802.11g和802.11a之上发展起来的一项技术，最大的特点是速率提升，理论速率最高可达600Mbps（目前业界主流为300Mbps）。 802.11n无线网络标准在帧聚合机制的实现上存在安全漏洞，攻击者通过PIP技术利用此漏洞可执行多种攻击，包括注入恶意信标帧、绕过防火墙规则、解除验证客户端、扫描主机和端口、执行ARP欺骗。
Severity
中
Formal description

目前没有详细的解决方案提供： http://www.ieee.org/

Reference
http://securityaffairs.co/wordpress/38234/hacking/802-11n-flaw.html
Impacted products
Name
IEEE 802.11n
Show details on source website
To clipboard Create KEV Entry 

{
  "description": "802.11\u534f\u8bae\u7ec4\u662f\u56fd\u9645\u7535\u5de5\u7535\u5b50\u5de5\u7a0b\u5b66\u4f1a\uff08IEEE\uff09\u4e3a\u65e0\u7ebf\u5c40\u57df\u7f51\u7edc\u5236\u5b9a\u7684\u6807\u51c6\u3002802.11n\u662f\u5728802.11g\u548c802.11a\u4e4b\u4e0a\u53d1\u5c55\u8d77\u6765\u7684\u4e00\u9879\u6280\u672f\uff0c\u6700\u5927\u7684\u7279\u70b9\u662f\u901f\u7387\u63d0\u5347\uff0c\u7406\u8bba\u901f\u7387\u6700\u9ad8\u53ef\u8fbe600Mbps\uff08\u76ee\u524d\u4e1a\u754c\u4e3b\u6d41\u4e3a300Mbps\uff09\u3002\r\n\r\n802.11n\u65e0\u7ebf\u7f51\u7edc\u6807\u51c6\u5728\u5e27\u805a\u5408\u673a\u5236\u7684\u5b9e\u73b0\u4e0a\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u901a\u8fc7PIP\u6280\u672f\u5229\u7528\u6b64\u6f0f\u6d1e\u53ef\u6267\u884c\u591a\u79cd\u653b\u51fb\uff0c\u5305\u62ec\u6ce8\u5165\u6076\u610f\u4fe1\u6807\u5e27\u3001\u7ed5\u8fc7\u9632\u706b\u5899\u89c4\u5219\u3001\u89e3\u9664\u9a8c\u8bc1\u5ba2\u6237\u7aef\u3001\u626b\u63cf\u4e3b\u673a\u548c\u7aef\u53e3\u3001\u6267\u884cARP\u6b3a\u9a97\u3002",
  "discovererName": "Hasselt University",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttp://www.ieee.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-04544",
  "openTime": "2015-07-15",
  "products": {
    "product": "IEEE 802.11n"
  },
  "referenceLink": "http://securityaffairs.co/wordpress/38234/hacking/802-11n-flaw.html",
  "serverity": "\u4e2d",
  "submitTime": "2015-07-08",
  "title": "802.11n\u65e0\u7ebf\u7f51\u7edc\u6807\u51c6\u5e27\u805a\u5408\u673a\u5236\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.