Abstract:This work provides an answer to the following key question: Are the Web-based management interfaces of the contemporary off-the-shelf wireless access points (WAP) free of flaws and vulnerabilities? The short answer is not very much. That is, after performing a vulnerability assessment on the Web interfaces of six different WAPs by an equal number of diverse renowned vendors, we reveal a significant number of assorted medium-to-high severity vulnerabilities that are straightforwardly or indirectly exploitable. Overall, 13 categories of vulnerabilities translated to 28 zero-day attacks are exposed. Our findings range from legacy path traversal, cross-site scripting, and clickjacking attacks to HTTP request smuggling and splitting, replay, denial of service, and information leakage among others. In the worst-case scenario, the attacker can acquire the administrator’s (admin) credentials and the WAP’s Wi-Fi passphrases or permanently lock the admin out of accessing the WAP’s Web interface. On top of everything else, we identify the already applied hardening measures by these devices and elaborate on extra countermeasures that are required to tackle the identified weaknesses. To our knowledge, this work contributes the first wholemeal appraisal of the security level of this kind of Web-based interfaces that go hand in glove with the myriads of WAPs out there, and it is therefore anticipated to serve as a basis for further research in this timely and challenging field.

WAPI Protocol Security Performance Evaluation

A Lightweight Key Management Scheme For 60 Ghz Wpan

An Efficient Privacy-Preserving Scheme for Wireless Link Layer Security

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Securing Wireless Systems Via Lower Layer Enforcements

Measurement and Analysis on the Packet Delivery Performance in A Large Scale Sensor Network

Energy efficient medium access control protocols for wireless sensor networks and its state-of-art

An Efficient EAP-Based Pre-Authentication for Inter-WRAN Handover in TV White Space

Security Analysis of WEP Algorithm Used in IEEE 802.11

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Weakness analysis and attack test for WLAN

Analysis of Security Problems in WAP

PTFW: a protocol testing framework for wireless sensor networks

A Mutual Authentication and Privacy Mechanism for WLAN Security.

Vulnerability Assessment of WAMS Communication System in the Energy Internet Based on Attack Tree Model

Virtual Access Point Implementation of WAPI in Wireless Mesh Networks

The Denial of Service Attack Analysis of WLAN Authentication Infrastructure

Your WAP Is at Risk: A Vulnerability Analysis on Wireless Access Point Web-Based Management Interfaces

Application of Wireless Sensor Network in Perimeter Protection System

Cryptanalysis and Security Enhancement of Three Authentication Schemes in Wireless Sensor Networks.

A Lightweight Secure User Authentication and Key Agreement Protocol for Wireless Sensor Networks.