Summary
Attackers can manipulate the power save state during a client association attempt. This causes the buffered SA-Query/SA-Response mechanism to timeout, allowing the AP to accept the attacker's association attempt and drop the victim client.
Products Potentially Affected
| OS/Product |
Exposure |
| IQ Engine (HiveOS) |
Yes |
| Extreme Wireless (IdentiFi) |
Yes |
| WiNG |
Yes |
|
Repair Recommendations
Wi-Fi systems should be used with WIPS, like ADSP. ADSP has MAC Spoof Activity Observed alarm which can identify the adversary.
Please see the full security advisory article here for more details and updates.
