Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

blog.coffinsec.com

Post reply on HN
Print view View original

51–60 of 109 posts

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#51

Post by freedomben »

codethief wrote: post #39
mmsc wrote: post #31

Earlier quoted context omitted.

In general, I would wager that HN prefers intellectual curiosity over overviews. Submission guidelines infer that by stating "Please submit the original source. If a post reports on something found on another site, submit the latter."

Sure, though I'd argue in the case of vulnerabilities an overview is particularly valuable. Not everyone wants to dive into the details; in my case what I'm most interested in is whether I (or anyone else at my day job) might be affected.

I would agree. I would also say that when the secondary article contains a lot of value added above, the original, such as is the case here, the secondary source is better because it is easy to follow its link to the original if that's what you'd like to see.

I definitely agree with the guideline around favoring original sources, but this seems like a good time to deviate.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#52

Post by bastawhiz »

petee wrote: post #49
stavros wrote: post #45

Earlier quoted context omitted.

> Java apps have proven no more secure in general Really? I think an extraordinary claim like "eliminating a whole class of problems makes applications no more secure in general" should also come with extraordinary evidence.

I think Java's CVE list should say enough. Point being humans can muck anything up, regardless of safeguards

This is a nonsense statement unless you note the Java runtime. Java is a language. The runtime is the software that runs the Java code. There's more than one runtime.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#53

Post by 0points »

RedShift1 wrote: post #21

I've been buying laptops with AMD CPU's but they always come with these trash MediaTek RZ616 Wi-Fi cards, why is that? I've been replacing them with Intel Wi-Fi cards, now I have a pile of RZ616 cards ready to become future microplastics :-(

You get what you pay for.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#54

Post by sedatk »

stavros wrote: post #50
petee wrote: post #49

Earlier quoted context omitted.

I think Java's CVE list should say enough. Point being humans can muck anything up, regardless of safeguards

A CVE list says nothing. I made my own language which has no CVEs, that obviously doesn't mean it's secure. The relevant metric is "CVEs per unit of functionality".

Also, popularity directly affects the number of CVEs.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#55

Post by heffer »

RedShift1 wrote: post #21

I've been buying laptops with AMD CPU's but they always come with these trash MediaTek RZ616 Wi-Fi cards, why is that? I've been replacing them with Intel Wi-Fi cards, now I have a pile of RZ616 cards ready to become future microplastics :-(

Lenovo grew unhappy with MediaTek as well and started soldering down Qualcomm chips for WLAN on their AMD platforms only to be burned by buggy firmware/driver interactions on Linux (which they officially sell and support). And Qualcomm stretches themselves rather thin on the mainline kernel side once a chipset generation is no longer the latest. It takes a tremendous amount of vendor pressure to make Qualcomm do anything these days.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#56

Post by Clamchop »

petee wrote: post #49
stavros wrote: post #45

Earlier quoted context omitted.

> Java apps have proven no more secure in general Really? I think an extraordinary claim like "eliminating a whole class of problems makes applications no more secure in general" should also come with extraordinary evidence.

I think Java's CVE list should say enough. Point being humans can muck anything up, regardless of safeguards

The point of the person you're replying to is that JVM software has far fewer vulnerabilities than it would have otherwise.

The number of CVEs reveals that there is a lot of Java software and that there's a strong culture of importing dependencies. But we also care about the nature of them, the normalized relative frequency of very serious flaws like RCE exploits.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#57

Post by Retr0id »

Is there some logic to MediaTek's naming conventions, or all their devices just MTxxxx where x is some incremented/random number?

I have a device with a mt6631 wifi chip and I'd assume it's unaffected just because it's not mentioned as affected anywhere, but it's hard to tell where it might fit into the lineup.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#58

Post by layer8 »

dylan604 wrote: post #17
Namidairo wrote: post #5

Not too surprising given what I've seen of their vendor sdk driver source code, compared to mt76. (Messy would be kind assessment) Unfortunately, there are also some running aftermarket firmware builds with the vendor driver, due to it having an edge in throughput over mt76. Mediatek and their WiSoC division luckily have a few engineers that are enthusiastic about engaging with the FOSS community, while also maintain…

Why is it so much of this hardware/firmware feels so much like deploying a PoC to production? Why can't they hire someone that actually knows what they are doing?

Hardware manufacturers see software as a cost center, it’s often made as cheaply as possible. And hardware engineers aren’t necessarily good software developers. It isn’t their main expertise.

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#59

Post by Retr0id »

mmsc wrote: post #22

Can the OP's link be changed to the original source, not the advertisement it currently links to? The exploit is documented https://blog.coffinsec.com/0day/2024/08/30/exploiting-CVE-20...

Their exploit development process is interesting, and I like to think I'd have done something similar (that is, compiling an easier-to-exploit version of the application and gradually working up to the real thing)

Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability

#60

Post by eqvinox »

> The affected versions include MediaTek SDK versions 7.4.0.1 and earlier, as well as OpenWrt 19.07 and 21.02.

> The vulnerability resides in wappd, a network daemon included in the MediaTek MT7622/MT7915 SDK and RTxxxx SoftAP driver bundle.

OpenWRT doesn't seem to use wappd though?

Post reply on HN