Codenomicon Labs

< categories

Wireless Access Points

Whitepaper on Wireless Security

This paper draws from the past and current state of existing wireless technologies and reflects experiences with emerging technologies. It describes how robustness-testing techniques can be used to assess the security of the available implementations and give statistics about the current state of affairs of Bluetooth and Wi-Fi. Quality and reliability improvements in these implementations will lead directly to decreased development and deployment costs, as well as increased public acceptance and faster adoption.

> Download the whitepaper here

Results

Result	Device	Version	Tested protocols	Known vulnerabilities
	Apple Airport Extreme	V5.7	802.11, IPv4, ARP, DHCP
	Buffalo Airstation	Ver.1.40	802.11, IPv4, ARP, DHCP, RIP, HTTP
	D-Link WBR-1310	2.00	802.11, IPv4, ARP, HTTP, TCP
	FON FON2100A/B/C	0.7.0 r4	802.11, IPv4, HTTP
	Siemens Gigaset SE361		802.11, ARP, DHCP, HTTP, TCP
	TPLink WA501G	2.12.5	802.11, IPv4, ARP, DHCP, HTTP, TCP
	Zyxel G-570S	V1.00 (ZJ.3) C0	802.11, IPv4, ARP, DHCP, HTTP

Results definition: The Verdict

Result	Description
	Excellent: No service interruption or outage was experienced. No issues experienced while testing.
	Good: The device showed a level of service degradation during the test, but no service interruption was experienced.
	Bad: The device or processes reset but came back up, there was a service interruption. Highly likely the issues can be exploited and personal data accessed. Can be protected with WEP/WPA. Potentially exploitable beyond denial of service.
	Ugly: The device or processes reset, was killed, or never came back up. Highly likely the issues can be exploited and personal data accessed. No protection measures. Potentially exploitable beyond denial of service.