Cisco says it will issue patches for wireless products impacted by the newly revealed Wi-Fi chip flaw termed Kr00k. The company says some of its routers, firewalls, access points and phones have been affected by the fault.

On Wednesday, cybersecurity company ESET disclosed that over one billion Wi-Fi-capable devices were once impacted by a susceptibility that can let hackers get possibly complex information from wireless communications.

Tracked as CVE-2019-15126, the Kr00k fault affects devices using some Wi-Fi chips made by Broadcom and Cypress. The security break causes devices using these chips to encode part of a user’s communications with a stationary and frail key, letting an attacker decrypt some of the wireless network packets communicated by impacted devices.

In an advisory published on Thursday, the company said they are also affected by the flaw, which it has labeled as a medium-severity information disclosure issue.

The company has already established that Connected Grid routers, the RV340W router, several Small Business routers and firewalls, numerous WAP access points, the Wireless IP Phone 8821, and two Catalyst access points are affected. Cisco is still trying to find if some other IP phones are also affected.

Cisco is working on fixes for each of the affected products, and the company says no workarounds are on hand.

The Kr00k susceptibility can be activated after a disassociation, which happens when a device is disconnected from a Wi-Fi network thanks to signal intrusion, switching access points, or incapacitating of the Wi-Fi feature on the device.

Leave a Reply

Your email address will not be published. Required fields are marked *