Since iOS automatically connects users to the closest WiFi network, ZecOps said the bug could be exploited in zero-click scenarios just by creating a malicious WiFi network name and then waiting for nearby users to connect to it when close enough. In new research published on Friday, security firm ZecOps said that they found a new string pattern that, when added to WiFi network names, could have far worse consequences than just crashing an iPhone's WiFi service.īy adding " to a network name, ZecOps said that a malicious threat actor could abuse the crash-pattern loop in the WiFi service to execute custom code in what could be described as a use-after-free vulnerability. Settings > General > Reset > Reset Network SettingsĪt the heart of the problem was the " %" character in the WiFi network name, which in Objective-C -the main programming language of iOS- is also used to declare variable names or commands. Initially, the bug was considered a pretty big deal before iOS experts discovered that disabling WiFi and resetting iOS network settings would clear those local files of the problematic network name and allow users to use their WiFi feature again. Since WiFi network names are written on disk in certain files, every time the iPhone tried to connect to a WiFi network, iOS would read those files and crash and reboot in a loop. ![]() Neither rebooting nor changing SSID fixes it :~) /2eue90JFu3- Carl Schou June 18, 2021 That iPhone WiFi crash bug is far worse than initially thoughtĪn innocuous iPhone bug that could crash the WiFi service has turned out to be far worse than initially thought after mobile security firm ZecOps showed on Friday how the bug could be abused for remote code execution attacks.ĭiscovered last month by Danish security researcher Carl Schou, the bug could crash any up-to-date iPhone that connected to an access point or WiFi network with a name of %p%s%s%s%s%n.Īfter joining my personal WiFi with the SSID “%p%s%s%s%s%n”, my iPhone permanently disabled it’s WiFi functionality.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |