Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2020-12638 workaround for WPA downgrade attack #7486

Merged
merged 5 commits into from
Jul 26, 2020

Commits on Jul 25, 2020

  1. CVE-2020-12638 workaround for WPA downgrade attack

    When connected to an encrypted (WEP/WPA) router, a rogue packet can
    cause the ESP8266 WiFi stack to drop to an unecrypted rogue network of
    the same SSID.
    
    Handle this by dropping the WiFi connection immediately and reconnecting
    to the stored WPA/WEP network requested by the application, whenever the
    AUTHMODE changes to OPEN from a secured mode.
    
    https://lbsfilm.at/blog/wpa2-authenticationmode-downgrade-in-espressif-microprocessors
    for more details.
    earlephilhower committed Jul 25, 2020
    Configuration menu
    Copy the full SHA
    40d62a5 View commit details
    Browse the repository at this point in the history

Commits on Jul 26, 2020

  1. Fix the debug message

    earlephilhower committed Jul 26, 2020
    Configuration menu
    Copy the full SHA
    8a7ad8e View commit details
    Browse the repository at this point in the history
  2. Check for the downgrade in main WIFI event process

    The downgrade event needs to be looked for in the main WiFi event
    processing function instead of the callback function (which will only
    trigger if the user actually makes a callback themselves).
    earlephilhower committed Jul 26, 2020
    Configuration menu
    Copy the full SHA
    f3342c3 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    f89944b View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    2b5a75f View commit details
    Browse the repository at this point in the history