3 ms·
4 exploits, 1 bug: exploiting CVE-2024-20017 4 different ways
- cynicalsecurity 2y agoI would have really chuckled if there were 2 exploits.
- lucb1e 2y agoFor those not familiar with every CVE ID, that's a WiFi driver bug for a "chipset commonly used on embedded platforms that support Wifi6 (802.11ax) including Ubiquiti, Xiaomi, and Netgear devices"
- supernetworks_ 2y agoLuckily recent openwrt releases, mainline Linux don’t use the proprietary driver that powers this daemon nor the vulnerable daemon. Since 2023 except for xiaomi routers they shouldn’t be affected I want to add
- dang 2y agoRecent and related: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability - https://news.ycombinator.com/item?id=41605680 https://news.ycombinator.com/item?id=41605680 - Sept 2024 (97 comments)
- jmholla 2y agoFrom the other thread: Ubiquiti devices are not impacted by this. [0][1] [0]: https://community.ui.com/questions/CVE-2024-20017/b3f1a425-d7cc-4fce-9218-c930ce4fa35f https://community.ui.com/questions/CVE-2024-20017/b3f1a425-d... [1]: https://news.ycombinator.com/item?id=41610266 https://news.ycombinator.com/item?id=41610266