3 ms·
By only connecting Tesla to AP with PMF (encrypted management frames) enabled, this exploit would not work? Because then you can not force a reconnect to AP usi
by punnerud 7y ago
By only connecting Tesla to AP with PMF (encrypted management frames) enabled, this exploit would not work? Because then you can not force a reconnect to AP using Deauthenticate frames.
The problem is more explained here in a recent HN post:
https://news.ycombinator.com/item?id=21889837 https://news.ycombinator.com/item?id=21889837
- stefan_ 7y agoThe DEAUTH thing is entirely incidental to the fully remote kernel code execution exploit chain.
- punnerud 7y agoI can agree on the Deauth, though it would maybe make it less receiptable to automated attack. I see that Action frames also is encrypted and verified when enable PMF, so it is still viable to avoid the exploit?