Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huaweiHuawei TechnologiesHUAWEI-SA-20200527-01-WIFI
HistoryMay 27, 2020 - 12:00 a.m.

Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chips

2020-05-2700:00:00
Huawei Technologies
www.huawei.com
74

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

3.1 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

0.007 Low

EPSS

Percentile

80.0%

JSON

There is an information disclosure vulnerability named Kr00k in Broadcom Wi-Fi chips. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic. (Vulnerability ID: HWPSIRT-2020-02164)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2019-15126.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en

Affected configurations

Vulners
Node
huaweiap7030deMatchv200r005c20
OR
huaweiap7030deMatchv200r006c00
OR
huaweiap7030deMatchv200r006c10
OR
huaweiap7030deMatchv200r006c20
OR
huaweiap7030deMatchv200r007c10
OR
huaweiap7030deMatchv200r007c20
OR
huaweiap7030deMatchv200r008c00
OR
huaweiap7030deMatchv200r008c10
OR
huaweiap7030deMatchv200r010c00
OR
huaweiap7030deMatchv200r019c00
OR
huaweiap9330dnMatchv200r005c20
OR
huaweiap9330dnMatchv200r006c00
OR
huaweiap9330dnMatchv200r006c10
OR
huaweiap9330dnMatchv200r006c20
OR
huaweiap9330dnMatchv200r007c10
OR
huaweiap9330dnMatchv200r007c20
OR
huaweiap9330dnMatchv200r008c00
OR
huaweiap9330dnMatchv200r008c10
OR
huaweiap9330dnMatchv200r010c00
OR
huaweiap9330dnMatchv200r019c00

Related

fortinet 1
nessus 17
ics 1
openvas 16
hp 1
mageia 2
githubexploit 4
suse 2
thn 1
trendmicroblog 1
schneier 1
packetstorm 1
threatpost 1
cisco 1
exploitpack 1
kitploit 1
mscve 1
kaspersky 1
zdt 1
exploitdb 1
attackerkb 1
cve 1
cvelist 1
redhatcve 1
nvd 1
prion 1
avleonov 1
apple 6
rapid7blog 1
fortinet
fortinet
Kr00k vulnerability (CVE-2019-15126) in Broadcom and Cypress Wi-Fi chips
2020-12-01 00:00:00
nessus
nessus
RHEL 7 : linux-firmware (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : linux-firmware (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : linux-firmware (Unpatched Vulnerability)
2024-06-03 00:00:00
ics
ics
Siemens SIMATIC, SIMOTICS (Update A)
2020-12-08 12:00:00
openvas
openvas
Huawei Data Communication: Information Disclosure Vulnerability (huawei-sa-20200527-01-wifi-en, Kr00k)
2023-02-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:4201-1)
2022-01-01 00:00:00
Mageia: Security Advisory (MGASA-2021-0104)
2022-01-28 00:00:00
hp
hp
HPSBPI03687 rev. 3 - Certain HP LaserJet Printer and MFP Products and JetDirect Print Server Products - Information Disclosure
2020-09-15 00:00:00
mageia
mageia
Updated nonfree firmware packages fix security vulnerability
2021-03-04 15:26:19
Updated nonfree firmware packages fix security vulnerability
2021-03-04 15:26:19
githubexploit
githubexploit
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados
2020-03-18 16:25:28
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados
2020-03-13 14:53:54
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Broadcom Bcm4389 Firmware
2020-04-05 17:46:41
suse
suse
Security update for kernel-firmware (low)
2021-12-31 00:00:00
Security update for the Linux Kernel (critical)
2022-02-10 00:00:00
thn
thn
New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices
2020-02-26 18:15:00
trendmicroblog
trendmicroblog
This Week in Security News: Trend Micro Detects a 10 Percent Rise in Ransomware in 2019 and New Wi-Fi Encryption Vulnerability Affects Over a Billion Devices
2020-02-28 13:56:27
schneier
schneier
Wi-Fi Chip Vulnerability
2020-03-03 12:43:15
packetstorm
packetstorm
Broadcom Wi-Fi KR00K Proof Of Concept
2020-03-19 00:00:00
threatpost
threatpost
Billions of Devices Open to Wi-Fi Eavesdropping Attacks
2020-02-27 04:07:18
cisco
cisco
Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerability
2020-02-27 00:00:00
exploitpack
exploitpack
Broadcom Wi-Fi Devices - KR00K Information Disclosure
2020-03-18 00:00:00
kitploit
kitploit
R00Kie-Kr00Kie - PoC Exploit For The CVE-2019-15126 Kr00K Vulnerability
2020-03-30 20:30:00
mscve
mscve
MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device
2023-02-14 08:00:00
kaspersky
kaspersky
KLA20228 OSI vulnerability in Microsoft Device
2023-02-14 00:00:00
zdt
zdt
Broadcom Wi-Fi Devices - (KR00K) Information Disclosure Exploit
2020-03-19 00:00:00
exploitdb
exploitdb
Broadcom Wi-Fi Devices - 'KR00K Information Disclosure
2020-03-18 00:00:00
attackerkb
attackerkb
CVE-2019-15126 aka Kr00k
2020-02-05 00:00:00
cve
cve
CVE-2019-15126
2020-02-05 17:15:10
cvelist
cvelist
CVE-2019-15126
2020-02-05 16:17:37
redhatcve
redhatcve
CVE-2019-15126
2020-03-06 16:40:50
nvd
nvd
CVE-2019-15126
2020-02-05 17:15:10
prion
prion
Information disclosure
2020-02-05 17:15:00
avleonov
avleonov
Microsoft Patch Tuesday February 2023: Win Graphics RCE, Edge RCE, Publisher SFB, CLFS EoP, Exchange RCEs, Word RCE, HoloLens1
2023-02-26 16:37:52
apple
apple
About the security content of iOS 13.2 and iPadOS 13.2
2019-10-28 00:00:00
About the security content of iOS 13.2 and iPadOS 13.2 - Apple Support
2020-04-05 02:40:44
About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra - Apple Support
2020-11-12 07:38:35
rapid7blog
rapid7blog
Patch Tuesday - February 2023
2023-02-15 00:41:59

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

3.1 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

0.007 Low

EPSS

Percentile

80.0%

JSON
Related for HUAWEI-SA-20200527-01-WIFI
fortinet1nessus17ics1openvas16hp1mageia2githubexploit4suse2thn1trendmicroblog1schneier1packetstorm1threatpost1cisco1exploitpack1kitploit1mscve1kaspersky1zdt1exploitdb1attackerkb1cve1cvelist1redhatcve1nvd1prion1avleonov1apple6rapid7blog1