Every device using chipsets manufactured prior to 2018 are reportedly vulnerable.
It’s no surprise that every speaker we tested was affected, since the KNOB exploit attacks the Bluetooth standard itself. The only device we actively compromised was a Harman Kardan Onyx Studio 2, but all devices negotiated 1-byte entropy and are vulnerable. Both devices were using a version of the KNOB proof-of-concept that patched ROM to force extremely low encryption. We tried to choose speakers from diverse price points.įor KNOB testing, we used a rooted Huawei Nexus 5 running Android Nougat, and to hijack the speaker we used a Raspberry Pi 3B+. The models we tested include 5 Harman Kardon and JBL speakers currently on store shelves, along with 2 older models. We were able to test 7 models of Bluetooth speaker, and we found all 7 vulnerable to attack. Bluetooth security test results show a critical risk Hackers can gain complete control over a Bluetooth device without alerting the victim, or carry out more insidious attacks like monitoring a conversation over a Bluetooth headset. We looked at seven models of wireless speakers from different manufacturers and found them all vulnerable to the recently-disclosed Key Negotiation of Bluetooth (KNOB) attack. But a new wave of Bluetooth tools have hackers picking the protocols apart, and our own testing shows that the devices are insecure.
Speakers and headsets, smart watches, game controllers, and IoT devices all rely on it to communicate.
0 kommentar(er)
