Black Hat USA 2010: WPA Migration Mode: WEP is Back to Haunt You 1/4

Speakers: Leandro Meiners, Diego Sor

Cisco access points support WPA migration mode, which enables both WPA and WEP clients to associate to an access point using the same Service Set Identifier (SSID). If WEP clients are still around, we can use the traditional WEP cracking arsenal against them. Therefore, we focused on analyzing the consequences of having this feature enabled when no WEP clients are present; for example after the migration to WPA has been carried out but this feature has been left enabled. We found that it is possible for an attacker to crack the WEP key under this scenario (i.e. no WEP clients). Once the key is recovered, it is possible to connect to the access point using this key (as it is operating in WPA migration mode) and access the network.

For more information click here (http://bit.ly/dwlBpJ)

Category:

Science & Technology

Tags:

• 10
• bhb
• n1
• clip1