FragAttacks: Wi-Fi Vulnerabilities Impacting Almost All Connected Devices Discovered, Windows Gets Patched

Security researcher Mathy Vanhoef has found and reported the new set of Wi-Fi vulnerabilities online.

Advertisement
By Jagmeet Singh | Updated: 13 May 2021 17:36 IST
Highlights
  • Mathy Vanhoef has detailed the vulnerabilities on a dedicated site
  • There is a range of 12 different vulnerabilities
  • Wi-Fi vulnerabilities have been patched to some extent by Microsoft
FragAttacks: Wi-Fi Vulnerabilities Impacting Almost All Connected Devices Discovered, Windows Gets Patched

Wi-Fi vulnerabilities could impact devices using even newer WPA2 and WPA3 standards

Photo Credit: Pixabay/ USA Reiseblogger

Multiple vulnerabilities have been discovered that are claimed to affect all modern Wi-Fi security protocols and impact a range of devices ranging from smartphones to routers and even small IoT devices. The vulnerabilities have been brought into notice by a Belgian cybersecurity expert who previously gained popularity for co-finding the widespread Wi-Fi vulnerabilities in the WPA2 protocol that resulted in key reinstallation attacks — commonly called KRACKs. Those security loopholes were fixed by most of the tech companies to avoid leaking of user data.

Mathy Vanhoef has found the new set of Wi-Fi vulnerabilities that he calls “fragmentation and aggregation attacks” — or FragAttacks in short. The researcher detailed the flaws through a dedicated site, as initially reported by Gizmodo.

According to the details provided online, there are 12 different security issues that could potentially leak user data or allow hackers to gain access to a device. Three of the discovered vulnerabilities are design flaws in the Wi-Fi standard and are thus believed to impact most devices out in the market, Vanhoef said. However, the researcher also found several other vulnerabilities that exist due to programming-level issues in Wi-Fi devices.

In one case, Vanhoef noted that a hacker could exploit Wi-Fi networks by injecting plaintext aggregated frames that look like handshake messages on a system. He also mentioned another flaw that could be exploited by tricking victims into processing encrypted transported data unintentionally.

Advertisement

The issues could impact users on Wi-Fi networks based on WPA2 or even WPA3 standards, the researcher said. A video demonstration of the key flaws has also been provided by the researcher.

Thankfully, Vanhoef underlined that the design flaws he found are hard to abuse as attackers require user interaction or need to use some uncommon network settings. The vulnerabilities were reported to various device makers and some of them have provided fixes for their devices. Similarly, the researcher informed the Wi-Fi Alliance and helped prepare security updates during a nine-month-long coordinated disclosure.

Advertisement

Although the exact period for how long the vulnerabilities exist is unknown, Vanhoef said on his site that even the original security protocol of Wi-Fi — WEP — is affected. It was notably released back in 1997.

Users are advised to install the latest software updates on their Wi-Fi devices to patch the loopholes. Microsoft has issued updates to address three of the more common vulnerabilities in Windows 10, Windows 8.1, and Windows 7. You should install these updates on your system to stay protected.

Advertisement

Similarly, companies including Cisco, Ruckus, Intel, Lenovo, Netgear, Samsung, and Synology have released patches for their devices. Given the reputation of Vanhoef and thanks to his background with discovering KRACK attacks, many other companies are likely to release patches for their devices in the coming days. Meanwhile, in case if a user doesn't get an update for their devices, Vanhoef recommended that the issues can be mitigated by visiting only websites that use HTTPS, have the latest updates in place, and must not reuse passwords.


Why did LG give up on its smartphone business? We discussed this on Orbital, the Gadgets 360 podcast. Later (starting at 22:00), we talk about the new co-op RPG shooter Outriders. Orbital is available on Apple Podcasts, Google Podcasts, Spotify, and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.
 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement
Popular Mobile Brands
  1. Vivo Y400 Pro 5G Confirmed to Launch in India Soon, Design Teased
  2. Vivo T4 Lite 5G Price in India, Launch Timeline and Key Features Leaked
  3. Samsung Teases Galaxy M36 Launch; Phone Spied Online Alongside Galaxy F36
  4. BSNL to Reportedly Install One Lakh Additional 4G Towers Across India
  5. Vivo X200 FE Allegedly Spotted on Geekbench With This MediaTek Chipset
  6. OnePlus Bullets Wireless Z3 to Launch in India on June 19: All Details
  7. Realme GT 7 Dream Edition is Now Available for Purchase in India
  1. Samsung Galaxy M36, Galaxy F36 Spotted on Google Play Console; Galaxy M36 Launch Reportedly Teased via Amazon
  2. Google, Scale AI's Largest Customer, Said to Plan Split After Meta Deal
  3. SpaceX Launches 26 New Starlink Satellites, Expands Global Internet Network
  4. Aurora Alert! Northern Lights May Be Visible as Far South as New York on June 14
  5. New Island Forms in Caspian Sea as Water Levels Drop, Russian Scientists Confirm
  6. Kesari Chapter 2 Now Streaming on JioHotstar: Everything You Need to Know About Akshay Kumar Starrer Movie
  7. Steam for Mac Now Available as Native Apple Silicon App With Latest Beta Release
  8. Coinbase Announces American Express-Backed Crypto Credit Card That Offers Bitcoin Rewards
  9. Killed by Google: Support for Android Instant Apps to Reportedly Be Dropped Later This Year
  10. Realme GT 7 Dream Edition Now Available for Purchase in India: Price, Sale Offers
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.