Exploitation Summary
EIP tracks 5 public exploits for CVE-2019-15126. PoCs published by Maurizio S, hexway, akabe1.
AI-analyzed exploit summary This Python script exploits CVE-2019-15126 (KR00K) to decrypt WPA2 CCMP data by sending disassociation frames and decrypting packets using an all-zero temporary key. It leverages Scapy for packet manipulation and Cryptodome for AES decryption.
Description
An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.
Exploits (5)
This Python script exploits CVE-2019-15126 (KR00K) to decrypt WPA2 CCMP data by sending disassociation frames and decrypting packets using an all-zero temporary key. It leverages Scapy for packet manipulation and Cryptodome for AES decryption.
This repository contains a functional PoC exploit for CVE-2019-15126 (kr00k), which targets WiFi vulnerabilities by forcing disassociation and capturing encrypted packets for decryption. The exploit includes detailed usage instructions and demonstrates the attack in action.
This repository contains a functional Python script that exploits CVE-2019-15126 (KR00K vulnerability) to decrypt WPA2 CCMP data by leveraging a known all-zero temporary key and nonce. The script uses Scapy for packet manipulation and Cryptodome for AES decryption, targeting vulnerable Wi-Fi devices.
This repository contains a functional PoC for CVE-2019-15126 (kr00k), which exploits a vulnerability in Wi-Fi chips to decrypt WPA2-encrypted packets by forcing the use of an all-zero encryption key. The script actively disassociates a target device and captures/sniffs packets for decryption.
This repository contains a functional PoC exploit for CVE-2019-15126 (kr00k), which targets WiFi devices by forcing disassociation and capturing encrypted packets that can be decrypted due to a vulnerability in the WPA2 protocol implementation. The exploit includes scripts for both live attacks and offline decryption of captured PCAP files.
References (13)
Scores
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N