Sagemcom [email protected] 5260 Router Insufficient Default PSK Entropy Vulnerability

Sagemcom email protected 5260 routers on firmware version 0.4.39 and possibly others, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of known values and a nonce with insufficient entropy. The number of possible PSKs is about 1.78 billion, which is too small. 0day.tod...

CVE-2019-9555

Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of known values and a nonce with insufficient entropy. The number of possible PSKs is about 1.78 billion, which is too small...

CVE-2019-9555

CVE-2019-9555 affects Sagemcom F@st 5260 routers (firmware 0.4.39 and possibly others) where WPA PSKs are derived from a two-part wordlist plus a nonce with insufficient entropy. This yields roughly 1.78 billion possible PSKs, making the WPA key space far smaller than expected and enabling potent...