Summary
IEEE 802.11 power-saving function allows Wi-Fi devices to conserve power by buffering or queuing frames destined for sleeping devices. Attackers may impersonate a network device's MAC address to transmit power-saving frames to access points, which can change the security context, allowing the buffered frame stack to no longer be encrypted.
Products Potentially Affected
| OS/Product |
Exposure |
| IQ Engine (HiveOS) |
No |
| Extreme Wireless (IdentiFi) |
No |
| WiNG |
No |
Repair Recommendations
Wi-Fi systems should be used with WIPS, like ADSP. ADSP has MAC Spoof Activity Observed alarm which can identify the adversary.
Please see the full security advisory article here for more details and updates.
