Skip to main content
Information Security

Return to Question

Bumped by Community user
Bumped by Community user
Bumped by Community user
Bumped by Community user
Bumped by Community user
Clarified question
Source Link
Timo Kosig
Timo Kosig
  • 119
  • 3

I apologise if this is a silly question, I just want to make sure I understand the impact of CVE-2017-13078 and CVE-2017-13080 correctly. Is the following assumption true?

If there is just one client on a Wi-Fi network that is vulnerable to above mentioned CVEs then the attacker may exploit that vulnerability and consequentlyas a result any client on that network (and not just the vulnerable client) that is susceptible tomay be attacked with broadcast/multicast frames being replayed may be impacted.

The KRACK white paper lists NTP UDP broadcasts as a possible example for an impact scenario.

Thank you for your answers!

I apologise if this is a silly question, I just want to make sure I understand the impact of CVE-2017-13078 and CVE-2017-13080 correctly. Is the following assumption true?

If there is just one client on a Wi-Fi network that is vulnerable to above mentioned CVEs then the attacker may exploit that vulnerability and consequently any client on that network (and not just the vulnerable client) that is susceptible to broadcast/multicast frames being replayed may be impacted.

The KRACK white paper lists NTP UDP broadcasts as a possible example for an impact scenario.

Thank you for your answers!

I apologise if this is a silly question, I just want to make sure I understand the impact of CVE-2017-13078 and CVE-2017-13080 correctly. Is the following assumption true?

If there is just one client on a Wi-Fi network that is vulnerable to above mentioned CVEs then the attacker may exploit that vulnerability and as a result any client on that network (and not just the vulnerable client) may be attacked with broadcast/multicast frames being replayed.

The KRACK white paper lists NTP UDP broadcasts as a possible example for an impact scenario.

Thank you for your answers!

Source Link
Timo Kosig
Timo Kosig
  • 119
  • 3

KRACK - does the ability to replay broadcast and multicast frames affect all clients in a wireless network?

I apologise if this is a silly question, I just want to make sure I understand the impact of CVE-2017-13078 and CVE-2017-13080 correctly. Is the following assumption true?

If there is just one client on a Wi-Fi network that is vulnerable to above mentioned CVEs then the attacker may exploit that vulnerability and consequently any client on that network (and not just the vulnerable client) that is susceptible to broadcast/multicast frames being replayed may be impacted.

The KRACK white paper lists NTP UDP broadcasts as a possible example for an impact scenario.

Thank you for your answers!