FRAG ATTACK: Putting the pieces back together – Part 2

Tue, 07/27/2021 - 11:51

In our previous blog post on FRAG ATTACK, Laird Connectivity discussed the threat of the vulnerability as disclosed by the Wi-Fi Alliance. In the weeks since, Laird Connectivity has been working to understand the impact on our Wi-Fi products and establish a mitigation plan for impacted customers. Utilizing the Wi-Fi Alliance test suite, Laird Connectivity has completed testing and can now provide a comprehensive list of impacted products.

The Impacted Products

The following list identifies the Laird Connectivity products impacted by one or more of the listed CVEs in the FRAG ATTACK announcement. The status of the products was established by testing the latest release software version for each, using the Wi-Fi Alliance Test Suite at Laird Connectivity’s advanced QA test facility.

Product

LWB

LWB5

LWB5+

EWB

Series 40

Series 45 [1] 

Series 50 [2]

Series 60 [3]

TiWi-R2

TiWi-BLE

TiWi5

Impacted

X

X

X

X

Not impacted

 

 

 

 

X

 

 

 

X

X

X

Note: Cells shown as X indicate devices should be considered vulnerable, no remediation is available from silicon vendor.

•  [1] 45 Series include SSD45, MSD45 and WB45 products

•  [2] 50 Series includes SSD50, MSD50 and WB50 products

•  [3] 60 Series includes all interfaces variants for SIPT60 & 2230 formats and SOM60 and IG60 platforms

Note that the above table is a summary of the impacted products. Detailed test results for each product and the CVEs that were tested are available from Laird Connectivity. Please contact Laird Connectivity at lairdconnect.com/contact.

Vulnerability Mitigation

The original announcement listed several vulnerabilities. Any mitigation will vary by each product’s test results. Laird Connectivity engineering has established that mitigation can impact one or multiple components in the software deliverable for each product, as such the mitigation may vary by product.

Product Mitigation Status Target Availability
LWB Pending October, 2021
LWB5 Pending  
LWB5+ Available October, 2021
EWB Pending October, 2021
Series 40 No Fix  
Series 45 Pending  
Series 50 Pending  
Series 60 Available July, 2021
IG60 Available July, 2021
SOM60 Available July, 2021
TiWi-R2 No Fix  
TiWi-BLE No Fix  
TiWi5 No Fix  

Please contact Laird Connectivity support for updates on the availability of mitigation for your required product.