Recently a DoS exploit for Broadcom chips was presented and with its help, an extremely varied range of Apple iDevices can be exploited. The vulnerability affects the BCM4325 and BCM4329 chips of the Broadcom company, any iDevice older than iPad 2 and iPhone 4 CDMA (including) being potential targets for hackers. If you wonder what kind of effect an attack on these devices could have, well it blocks the possibility of using that Wi-Fi chip and nothing more.
An out-of-bounds read error condition exists in Broadcom's BCM4325 and BCM4329 combo firmware solutions. This error can be leveraged to deny service attack, and possibly information disclosure. An attacker can send an RSN (802.11i) information element, which causes the Wi-Fi NIC to stop responding. CORE Security Technologies has identified a potential Denial-of-Service (DoS) vulnerability in certain older Broadcom Wi-Fi chips, specifically the BCM4325 and BCM4329. Other Broadcom chips are not affected. This DoS issue could cause certain consumer electronics devices containing these chips to experience a transient WLAN service interruption as long as the DoS is active.
The problem with this vulnerability lies in the fact that iDevices already sold by Apple cannot be protected against it unless Apple finds a way to install a firmware update for the Wi-Fi chip through an iOS restore, in case otherwise any terminal is vulnerable. The good part is that performing a DoS attack requires advanced knowledge of networking and more, so most users can rest easy for now.
- BCM4325
- Apple iPhone 3GS
- Apple iPod 2G
- HTC Touch Pro 2
- HTC Droid Incredible
- Samsung Spica
- Acer Liquid
- Motorola Devour
- Ford Edge (yes, it's a car)
- BCM4329
- Apple iPhone 4
- Apple iPhone 4 Verizon
- Apple iPod 3G
- Apple iPad Wi-Fi
- Apple iPad 3G
- Apple iPad 2
- Apple TV 2G
- Motorola Xoom
- Motorola Droid X2
- Motorola Atrix
- Samsung Galaxy Tab
- Samsung Galaxy S 4G
- Samsung Nexus S
- Samsung Stratosphere
- Samsung Fascinate
- HTC Nexus One
- HTC Evo 4G
- HTC ThunderBolt
- HTC Droid Incredible 2
- LG Revolution
- Sony Ericsson Xperia Play
- Pantech Breakout
- Nokia Lumina 800
- Kyocera Echo
- Asus Transformer Prime
- ZPad case
