Synology Security Synology-SA-19:16 Dragonblood

[Synology RSS]

Dragonblood attacks, CVE-2919-9494, and CVE-2019-9496 allow remote attackers to obtain sensitive information or conduct denial-of-service attacks via a susceptible version of Synology Router Manager (SRM). CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, and CVE-2019-9499 allow remote attackers to obtain sensitive information via a susceptible version of RADIUS Server.

Continue reading...
- - -
Source: synology.com

 

[fredbert]

A summary of the Dragonblood attacks I found on ZDNet. Focuses on WPA3 with one attack based on WPA2/WPA3 support and the client forcing downgrade to WPA2.

Dragonblood vulnerabilities disclosed in WiFi WPA3 standard | ZDNet