Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
blog.coffinsec.com
Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
1–10 of 109 posts
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#2[flagged]
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#3Exploit is hard to distinguish between a back door here.
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#4Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#5Not too surprising given what I've seen of their vendor sdk driver source code, compared to mt76. (Messy would be kind assessment)
Unfortunately, there are also some running aftermarket firmware builds with the vendor driver, due to it having an edge in throughput over mt76.
Mediatek and their WiSoC division luckily have a few engineers that are enthusiastic about engaging with the FOSS community, while also maintaining their own little OpenWrt fork running mt76.[1]
[1] https://git01.mediatek.com/plugins/gitiles/openwrt/feeds/mtk...
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#6Exploit is hard to distinguish between a back door here.
Posting claims of it being such is pretty easy, though.
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#7i still cannot fathom why in this day and age where people buy any silicon that's available, these C tier vendors don't adopt the PC strategy and completely open their firmwares for open source community.
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#8i still cannot fathom why in this day and age where people buy any silicon that's available, these C tier vendors don't adopt the PC strategy and completely open their firmwares for open source community.
FCC regulations around not making it easy to transmit outside of the licensed band tend to cause this.
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#9i still cannot fathom why in this day and age where people buy any silicon that's available, these C tier vendors don't adopt the PC strategy and completely open their firmwares for open source community.
FCC regulations around not making it easy to transmit outside of the licensed band tend to cause this.
Making the code available doesn’t necessarily mean that you can actually flash the image since it can be cryptographically locked down. Or even you support flashing but only let you do certain trusted operations from a signed image.
Re: Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability
#10They say that OpenWrt 19.07 and 21.02 are affected, but as far as I can tell, official builds of OpenWrt only use the mt76 driver and not the Mediatek SDK.