- Products
- Network Security
- Threat Protection
- Secure Access Service Edge (SASE)
- Cloud Security
- Endpoint Security
- Email Security
- Secure Access
-
Wi-Fi 6 Access Points
SonicWall SonicWave 600 series access points provide always-on, always-secure connectivity for complex, multi-device environments.
Read More
- Solutions
- Industries
- Use Cases
- Solutions Widgets
- Solutions Content Widgets
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
- Solutions Image Widgets
-
- Partners
- SonicWall Partners
- Partner Resources
- Partner Widgets
- Custom HTML : Partners Content WIdgets
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
- Partners Image Widgets
-
- Support
- Support
- Resources
- Capture Labs
- Support Widget
- Custom HTML : Support Content WIdgets
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
- Support Image Widgets
-
- COMPANY
- PROMOTIONS
- MANAGED SERVICES
- Contact Sales
-
- Menu
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
SonicWall wireless devices are not vulnerable to Kr00k (CVE-2019-15126)
04/02/2020 
1 People found this article helpful
187,288 Views
Description
This article describes Kr00k in brief and will explain why SonicWall wireless devices are not vulnerable to it.
Cause
What is Kr00K?
ESET researchers discovered a previously unknown vulnerability in Wi-Fi chips and named it Kr00k. This serious flaw, assigned CVE-2019-15126, causes vulnerable devices to use an all-zero encryption key to encrypt part of the user’s communication. In a successful attack, this vulnerability allows an adversary to decrypt some wireless network packets transmitted by a vulnerable device.
Who is affected:
Kr00k affects wireless devices using Wi-Fi chips manufactured by Broadcom and Cypress that haven’t yet been patched. These are the most common Wi-Fi chips used in contemporary Wi-Fi-capable devices such as smartphones, tablets, laptops, and IoT gadgets. Not only client devices but also Wi-Fi access points and routers with Broadcom chips were affected by the vulnerability, thus making many environments with unaffected or already patched client devices vulnerable anyway.
Resolution
All SonicWall wireless equipped devices are not affected by Kr00k vulnerability.
SonicWall wireless devices do not use Broadcom or Cypress chips which were affected by the vulnerability.
Wireless devices with Wi-Fi chips from other manufacturers, including Qualcomm, Realtek, Ralink, Mediatek have not been seen the vulnerability manifest itself.
Please visit https://psirt.global.sonicwall.com for details about these vulnerabilities.
Related Articles
- How to Setup the SonicWave 600 series
- How to Enable Roaming in SonicOS?
- Configuring a Virtual Access Point (VAP) Profile for Sonicwall Access Points
Categories
- Secure Wireless > SonicPoint Series > Hardware
- Secure Wireless > SonicWave 400 Series
- Secure Wireless > SonicWave 200 Series
YES
NO