Broadpwn WiFi vulnerability fix ?

hw · 28 Jun 2018, 17:34

Hi,

Is there going to be a fix for the "Broadpwn" wifi vulnerability issue ?
https://security-tracker.debian.org/tracker/CVE-2017-9417

Thanks,

UniSuperBox · 7 Aug 2018, 20:14

According to all sources I've found online, the bug is in the proprietary Wi-Fi driver for the Broadcom BCM43xx chips. To my knowledge, the Nexus 5 and Nexus 7 2013s are all vulnerable. Since Google had stopped security updates for those devices prior to the bug disclosure, an update was not issued. These devices are vulnerable but no fix exists.

Edit: There is conflicting information on the Nexus 7 2013 (AKA second generation). the iFixit teardown found a Qualcomm wireless chip inside.

hw · 9 Jul 2018, 20:17

There is work being done on a 3rd party fix - https://github.com/seemoo-lab/nexmon/issues/108