SonicWall wireless devices are not vulnerable to Kr00k (CVE-2019-15126)

04/02/2020 0 3059

DESCRIPTION:

This article describes Kr00k in brief and will explain why SonicWall wireless devices are not vulnerable to it.

CAUSE:

What is Kr00K?

 ESET researchers discovered a previously unknown vulnerability in Wi-Fi chips and named it Kr00k. This serious flaw, assigned CVE-2019-15126, causes vulnerable devices to use an all-zero encryption key to encrypt part of the user’s communication. In a successful attack, this vulnerability allows an adversary to decrypt some wireless network packets transmitted by a vulnerable device.

 Who is affected:

Kr00k affects wireless devices using Wi-Fi chips manufactured by Broadcom and Cypress that haven’t yet been patched. These are the most common Wi-Fi chips used in contemporary Wi-Fi-capable devices such as smartphones, tablets, laptops, and IoT gadgets.  Not only client devices but also Wi-Fi access points and routers with Broadcom chips were affected by the vulnerability, thus making many environments with unaffected or already patched client devices vulnerable anyway.

RESOLUTION:

All SonicWall wireless equipped devices are not affected by Kr00k vulnerability.

SonicWall wireless devices do not use Broadcom or Cypress chips which were affected by the vulnerability.
Wireless devices with Wi-Fi chips from other manufacturers, including Qualcomm, Realtek, Ralink, Mediatek have not been seen the vulnerability manifest itself.

 Please visit https://psirt.global.sonicwall.com for details about these vulnerabilities.