ADVISORIES.md

Security Advisories / Bulletins linked to FragAttacks

Pull requests with additional links are welcome! Or create an issue on GitHub to request a link to be added.

A

• Arista
• Arris
• Aruba
• Avm.de: Look for "FragAttacks" Wi-Fi vulnerability
• Asuswrt-Merlin: FragAttacks got patched in 386.2_6 (6-June-2021).
• Arlo

C

• Check Point
• Cisco
• COMMSCOPE/Ruckus: Overview, Link 2, Link 3. Their claim that EAP-TLS or 802.11w makes attacks harder is incorrect.
• Cypress
• Cambium Networks

D

• Dell
• DD-WRT: Patches are included in revision r46690. Builds are available depending on the hardware: Marvell MVEBU, Atheros WiSOC, Broadcom SoC, x86 based, Ralink SoC.

E

• Eero
• Extreme Networks
• Espressif

F

• Fortinet

H

• Huawei

I

• Intel

J

• Juniper

K

• Keenetic

L

• Lancom: look for WLAN vulnerability "Fragattacks" - They provide patches .
• Lenovo
• Linksys
• Linux Wireless

M

• Microsoft: CVE-2020-24587, CVE-2020-24588, CVE-2020-26144
• Mist
• MikroTik: patches are available for all releases.

N

• Netgear: their claim that the adversary needs to know the Wi-Fi password is incorrect.

O

• OpenWRT: patches have been commited but unclear which builds have these patches so far. This discussion talks about which versions/buids have patches.

R

• Ruckus/COMMSCOPE: Overview, Link 2, Link 3. Their claim that EAP-TLS or 802.11w makes attacks harder is incorrect.

S

• Samsung: Look for SMR-APR-21 & SVE-2021-20775
• SierraWireless
• Suse
• Synology
• Sophos

T

• Telekom.com
• Texas Instruments: they also provide an application report

Z

• Zyxel

Other Overviews

• ICASI
• Wi-Fi Alliance