Sign-up

ID

VAR-202002-0458


CVE

CVE-2019-15126


TITLE

Broadcom Wi-Fi Vulnerability to disclose information on client devices

Trust: 0.8

sources: JVNDB: JVNDB-2019-014590

DESCRIPTION

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503. This vulnerability is CVE-2019-9500 , CVE-2019-9501 , CVE-2019-9502 , CVE-2019-9503 Is a different vulnerability.Information may be disclosed

Trust: 1.8

sources: NVD: CVE-2019-15126 // JVNDB: JVNDB-2019-014590 // VULHUB: VHN-147141 // VULMON: CVE-2019-15126

AFFECTED PRODUCTS

vendor:broadcommodel:bcm4356scope:eqversion: -

Trust: 1.0

vendor:broadcommodel:bcm43012scope:eqversion: -

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.15.1

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:13.2

Trust: 1.0

vendor:broadcommodel:bcm4375scope:eqversion: -

Trust: 1.0

vendor:broadcommodel:bcm43013scope:eqversion: -

Trust: 1.0

vendor:broadcommodel:bcm4389scope:eqversion: -

Trust: 1.0

vendor:applemodel:ipadosscope:ltversion:13.2

Trust: 1.0

vendor:broadcommodel:bcm43752scope:eqversion: -

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.15

Trust: 0.8

vendor:broadcommodel:bcm4356scope: - version: -

Trust: 0.8

vendor:applemodel:ipadosscope:eqversion:13.2 未満 (ipad air 2 以降)

Trust: 0.8

vendor:broadcommodel:bcm4389scope: - version: -

Trust: 0.8

vendor:applemodel:ipadosscope:eqversion:13.2 未満 (ipad mini 4以降)

Trust: 0.8

vendor:broadcommodel:bcm43013scope: - version: -

Trust: 0.8

vendor:applemodel:iosscope:eqversion:13.2 未満 (ipod touch 第 7 世代)

Trust: 0.8

vendor:broadcommodel:bcm4375scope: - version: -

Trust: 0.8

vendor:applemodel:iosscope:eqversion:13.2 未満 (iphone 6s 以降)

Trust: 0.8

vendor:broadcommodel:bcm43752scope: - version: -

Trust: 0.8

vendor:broadcommodel:bcm43012scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2019-014590 // NVD: CVE-2019-15126

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-15126
value: LOW

Trust: 1.0

NVD: JVNDB-2019-014590
value: LOW

Trust: 0.8

CNNVD: CNNVD-202002-123
value: LOW

Trust: 0.6

VULHUB: VHN-147141
value: LOW

Trust: 0.1

VULMON: CVE-2019-15126
value: LOW

Trust: 0.1

nvd@nist.gov: CVE-2019-15126
severity: LOW
baseScore: 2.9
vectorString: AV:A/AC:M/AU:N/C:P/I:N/A:N
accessVector: ADJACENT_NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 5.5
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

NVD: JVNDB-2019-014590
severity: LOW
baseScore: 2.9
vectorString: AV:A/AC:M/AU:N/C:P/I:N/A:N
accessVector: ADJACENT NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

VULHUB: VHN-147141
severity: LOW
baseScore: 2.9
vectorString: AV:A/AC:M/AU:N/C:P/I:N/A:N
accessVector: ADJACENT_NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 5.5
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-15126
baseSeverity: LOW
baseScore: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: ADJACENT
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 1.6
impactScore: 1.4
version: 3.1

Trust: 1.0

NVD: JVNDB-2019-014590
baseSeverity: LOW
baseScore: 3.1
vectorString: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: ADJACENT NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-147141 // VULMON: CVE-2019-15126 // JVNDB: JVNDB-2019-014590 // CNNVD: CNNVD-202002-123 // NVD: CVE-2019-15126

PROBLEMTYPE DATA

problemtype:CWE-367

Trust: 1.9

sources: VULHUB: VHN-147141 // JVNDB: JVNDB-2019-014590 // NVD: CVE-2019-15126

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202002-123

TYPE

encryption problem

Trust: 0.6

sources: CNNVD: CNNVD-202002-123

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-014590

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-147141 // 
            
            
            
            VULMON: CVE-2019-15126

PATCH
title:HT210721url:https://support.apple.com/en-us/HT210721
Trust: 0.8
title:HT210722url:https://support.apple.com/en-us/HT210722
Trust: 0.8
title:HT210788url:https://support.apple.com/en-us/HT210788
Trust: 0.8
title:HT210721url:https://support.apple.com/ja-jp/HT210721
Trust: 0.8
title:HT210722url:https://support.apple.com/ja-jp/HT210722
Trust: 0.8
title:HT210788url:https://support.apple.com/ja-jp/HT210788
Trust: 0.8
title:Top Pageurl:https://www.broadcom.com/
Trust: 0.8
title:Broadcom Wi-Fi client devices Fixes for encryption problem vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=110670
Trust: 0.6
title:Cisco: Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerabilityurl:https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-20200226-wi-fi-info-disclosure
Trust: 0.1
title:HP: HPSBPI03687 rev. 1 - Certain HP LaserJet Printer and MFP products and JetDirect Print server products  -  Information disclosureurl:https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=HPSBPI03687
Trust: 0.1
title:Siemens Security Advisories: Siemens Security Advisoryurl:https://vulmon.com/vendoradvisory?qidtp=siemens_security_advisories&qid=e94c95e86a0d854e5ddde8387479c15d
Trust: 0.1
title:Huawei Security Advisories: Security Notice - Statement About the Vulnerability Kr00k in Wi-Fi Chipsurl:https://vulmon.com/vendoradvisory?qidtp=huawei_security_advisories&qid=8c96d5ae91864c23cba01dc2293c6674
Trust: 0.1
title:Huawei Security Advisories: Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chipsurl:https://vulmon.com/vendoradvisory?qidtp=huawei_security_advisories&qid=fd5076234cfa3d4e04343bceac7269bd
Trust: 0.1
title:kr00kurl:https://github.com/BennyTW/kr00k 
Trust: 0.1
title:r00kie-kr00kieurl:https://github.com/hexway/r00kie-kr00kie 
Trust: 0.1
title:kr00kerurl:https://github.com/akabe1/kr00ker 
Trust: 0.1
title:raw-packeturl:https://github.com/raw-packet/raw-packet 
Trust: 0.1
title:wifi_pocurl:https://github.com/EaglerLight/wifi_poc 
Trust: 0.1
title:best-of-container-toolingurl:https://github.com/containertooling/best-of-container-tooling 
Trust: 0.1
title:best-of-container-toolingurl:https://github.com/sectooling/best-of-container-tooling 
Trust: 0.1
title:Protocol-Vulurl:https://github.com/WinMin/Protocol-Vul 
Trust: 0.1
title:Exp101tsArchiv30thersurl:https://github.com/nu11secur1ty/Exp101tsArchiv30thers 
Trust: 0.1
title:PoC-in-GitHuburl:https://github.com/developer3000S/PoC-in-GitHub 
Trust: 0.1
title:awesome-cve-poc_qazbnm456url:https://github.com/xbl3/awesome-cve-poc_qazbnm456 
Trust: 0.1
title:CVE-POCurl:https://github.com/0xT11/CVE-POC 
Trust: 0.1
title:PoC-in-GitHuburl:https://github.com/hectorgie/PoC-in-GitHub 
Trust: 0.1
title:PoC-in-GitHuburl:https://github.com/nomi-sec/PoC-in-GitHub 
Trust: 0.1
title: - url:https://www.welivesecurity.com/2020/08/06/beyond-kr00k-even-more-wifi-chips-vulnerable-eavesdropping/
Trust: 0.1
title:The Registerurl:https://www.theregister.co.uk/2020/03/20/kr00k_wifi_bug_poc/
Trust: 0.1
title:The Registerurl:https://www.theregister.co.uk/2020/02/27/wifi_chip_bug_eset/
Trust: 0.1
title:BleepingComputerurl:https://www.bleepingcomputer.com/news/security/cisco-working-on-patches-for-new-kr00k-wifi-vulnerability/
Trust: 0.1
title:Threatposturl:https://threatpost.com/billions-of-devices-wifi-encryption-hack/153267/
Trust: 0.1
title:welivesecurityurl:https://www.welivesecurity.com/2020/02/26/krook-serious-vulnerability-affected-encryption-billion-wifi-devices/
Trust: 0.1
title:BleepingComputerurl:https://www.bleepingcomputer.com/news/security/kr00k-bug-in-broadcom-cypress-wifi-chips-leaks-sensitive-info/
Trust: 0.1
sources:
            
            
            VULMON: CVE-2019-15126 // 
            
            
            
            JVNDB: JVNDB-2019-014590 // 
            
            
            
            CNNVD: CNNVD-202002-123

EXTERNAL IDS
db:ICS CERTid:ICSA-20-224-05
Trust: 2.6
db:NVDid:CVE-2019-15126
Trust: 2.6
db:PACKETSTORMid:156809
Trust: 1.8
db:SIEMENSid:SSA-712518
Trust: 1.8
db:JVNid:JVNVU96749516
Trust: 0.8
db:JVNid:JVNVU99404393
Trust: 0.8
db:JVNid:JVNVU96514651
Trust: 0.8
db:JVNDBid:JVNDB-2019-014590
Trust: 0.8
db:CNNVDid:CNNVD-202002-123
Trust: 0.7
db:EXPLOIT-DBid:48233
Trust: 0.7
db:AUSCERTid:ESB-2022.0622
Trust: 0.6
db:AUSCERTid:ESB-2020.0712
Trust: 0.6
db:AUSCERTid:ESB-2020.0712.3
Trust: 0.6
db:AUSCERTid:ESB-2020.2773
Trust: 0.6
db:AUSCERTid:ESB-2022.0614
Trust: 0.6
db:AUSCERTid:ESB-2022.0215
Trust: 0.6
db:AUSCERTid:ESB-2022.0069
Trust: 0.6
db:AUSCERTid:ESB-2021.4213
Trust: 0.6
db:AUSCERTid:ESB-2020.0712.2
Trust: 0.6
db:AUSCERTid:ESB-2020.4272
Trust: 0.6
db:AUSCERTid:ESB-2022.0205
Trust: 0.6
db:AUSCERTid:ESB-2022.0610
Trust: 0.6
db:CXSECURITYid:WLB-2020030100
Trust: 0.6
db:CNVDid:CNVD-2020-18530
Trust: 0.1
db:VULHUBid:VHN-147141
Trust: 0.1
db:VULMONid:CVE-2019-15126
Trust: 0.1
sources:
            
            
            VULHUB: VHN-147141 // 
            
            
            
            VULMON: CVE-2019-15126 // 
            
            
            
            JVNDB: JVNDB-2019-014590 // 
            
            
            
            CNNVD: CNNVD-202002-123 // 
            
            
            
            NVD: CVE-2019-15126

REFERENCES
url:https://us-cert.cisa.gov/ics/advisories/icsa-20-224-05
Trust: 3.2
url:https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20200226-wi-fi-info-disclosure
Trust: 2.5
url:http://packetstormsecurity.com/files/156809/broadcom-wi-fi-kr00k-proof-of-concept.html
Trust: 2.4
url:http://www.arubanetworks.com/assets/alert/aruba-psa-2020-003.txt
Trust: 1.8
url:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-wifi-en
Trust: 1.8
url:http://www.huawei.com/en/psirt/security-notices/huawei-sn-20200228-01-kr00k-en
Trust: 1.8
url:https://cert-portal.siemens.com/productcert/pdf/ssa-712518.pdf
Trust: 1.8
url:https://psirt.global.sonicwall.com/vuln-detail/snwlid-2020-0001
Trust: 1.8
url:https://support.apple.com/kb/ht210721
Trust: 1.8
url:https://support.apple.com/kb/ht210722
Trust: 1.8
url:https://support.apple.com/kb/ht210788
Trust: 1.8
url:https://www.mist.com/documentation/mist-security-advisory-kr00k-attack-faq/
Trust: 1.8
url:https://www.synology.com/security/advisory/synology_sa_20_03
Trust: 1.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-15126
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-15126
Trust: 0.8
url:https://jvn.jp/vu/jvnvu96514651/
Trust: 0.8
url:http://jvn.jp/vu/jvnvu96749516/index.html
Trust: 0.8
url:http://jvn.jp/vu/jvnvu99404393/index.html
Trust: 0.8
url:https://www.exploit-db.com/exploits/48233
Trust: 0.7
url:https://www.auscert.org.au/bulletins/esb-2020.4272/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2022.0069
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0712/
Trust: 0.6
url:https://www.huawei.com/cn/psirt/security-notices/huawei-sn-20200228-01-kr00k-cn
Trust: 0.6
url:https://vigilance.fr/vulnerability/broadcom-wi-fi-chipsets-information-disclosure-via-frames-decryption-31690
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.2773/
Trust: 0.6
url:https://support.apple.com/en-us/ht210788
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2021.4213
Trust: 0.6
url:https://cxsecurity.com/issue/wlb-2020030100
Trust: 0.6
url:https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20200527-01-wifi-cn
Trust: 0.6
url:https://msrc.microsoft.com/update-guide/vulnerability/cve-2019-15126
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2022.0614
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0712.3/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2022.0205
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2020.0712.2/
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2022.0215
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2022.0622
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2022.0610
Trust: 0.6
url:https://cwe.mitre.org/data/definitions/367.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://github.com/bennytw/kr00k
Trust: 0.1
sources:
            
            
            VULHUB: VHN-147141 // 
            
            
            
            VULMON: CVE-2019-15126 // 
            
            
            
            JVNDB: JVNDB-2019-014590 // 
            
            
            
            CNNVD: CNNVD-202002-123 // 
            
            
            
            NVD: CVE-2019-15126

CREDITS
ESET security researcher Miloš Čermák,Maurizio Siddu,Anonymous
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-202002-123

SOURCES
db:VULHUBid:VHN-147141
db:VULMONid:CVE-2019-15126
db:JVNDBid:JVNDB-2019-014590
db:CNNVDid:CNNVD-202002-123
db:NVDid:CVE-2019-15126

LAST UPDATE DATE
2024-08-14T12:14:47.969000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-147141date:2020-08-11T00:00:00
db:VULMONid:CVE-2019-15126date:2020-08-11T00:00:00
db:JVNDBid:JVNDB-2019-014590date:2020-08-13T00:00:00
db:CNNVDid:CNNVD-202002-123date:2023-02-15T00:00:00
db:NVDid:CVE-2019-15126date:2020-08-11T19:15:17.033

SOURCES RELEASE DATE
db:VULHUBid:VHN-147141date:2020-02-05T00:00:00
db:VULMONid:CVE-2019-15126date:2020-02-05T00:00:00
db:JVNDBid:JVNDB-2019-014590date:2020-03-02T00:00:00
db:CNNVDid:CNNVD-202002-123date:2020-02-05T00:00:00
db:NVDid:CVE-2019-15126date:2020-02-05T17:15:10.443