Blog | G5 Cyber Security

Have you patched your IoT devices against the Kr.k Wi-Fi chip flaw

The Kr.k vulnerability (also known as CVE-2019-15126) exists in certain Broadcom and Cypress Wi-Fi chipsets. It allows unauthorized decryption of some WPA2-encrypted traffic by causing vulnerable devices to use an easy-to-decrypt all-zero encryption key. The vulnerability is related to the KRACK flaw in the WPA-2 protocol discovered in 2017. The solution does not (thankfully) have to be a hardware fix. Manufacturers of vulnerable devices can push out firmware and driver updates to apply fixes.”]

Source: https://www.bitdefender.com/blog/hotforsecurity/patched-iot-devices-krook-wi-fi-chip-flaw/

Exit mobile version