Fragment and Forge vulnerabilities(FragAttacks) Statement

For additional information, see: https://www.wi-fi.org/security-update-fragmentation

TP-Link is aware that researchers have disclosed a set of vulnerabilities about Wi-Fi named FragAttacks.

As soon as we became aware of the details, we immediately launched an investigation. As the investigation progresses, TP-Link will update this advisory with information about affected products.

According to the investigation, the following conditions are required to exploit the wireless vulnerability:

1. Someone knows your Wi-Fi password and connects to your Wi-Fi network
2. Someone needs to intercept communication between your router and devices on your Wi-Fi.
3. In order to achieve the purpose of obtaining private information, an attacker would need to trick a user on the network to visit the attacker's server (Phishing Email, malicious ads, etc.).

Workarounds

1. Set a strong Wi-Fi password and change it regularly. Being careful not to share your Wi-Fi password.
2. Periodically check the devices connected to your network. If you see any unknown device, block these devices and change your Wi-Fi password.
3. We recommend that you use HTTPS protocol to access the website. Don't click on emails from unknown recipients or visit suspicious websites.

Affected

TP-Link will update this advisory as new information emerges.

SOHO Router

Range Extender

Deco

Omada EAP    

Revision History

2021-05-14 Published advisory

Disclaimer

FragAttacks vulnerabilities will remain if you do not take all recommended actions. TP-Link cannot bear any responsibility for consequences that could have been avoided by following the recommendations in this statement.