New 5G Modems Flaws Affect iOS Devices and Android Models from Major Brands

A assortment of security flaws in the firmware implementation of 5G mobile network modems from main chipset vendors these as MediaTek and Qualcomm impression USB and IoT modems as nicely as hundreds of smartphone models operating Android and iOS.

Of the 14 flaws – collectively referred to as 5Ghoul (a mixture of “5G” and “Ghoul”) – 10 have an effect on 5G modems from the two corporations, out of which three have been labeled as significant-severity vulnerabilities.

“5Ghoul vulnerabilities may well be exploited to repeatedly launch attacks to drop the connections, freeze the link that require handbook reboot or downgrade the 5G connectivity to 4G,” the researchers stated in a research printed now.

As numerous as 714 smartphones from 24 brands are impacted, like individuals from Vivo, Xiaomi, OPPO, Samsung, Honor, Motorola, realme, OnePlus, Huawei, ZTE, Asus, Sony, Meizu, Nokia, Apple, and Google.

Future WEBINAR Cracking the Code: Find out How Cyber Attackers Exploit Human Psychology

At any time questioned why social engineering is so effective? Dive deep into the psychology of cyber attackers in our upcoming webinar.

Sign up for Now

The vulnerabilities were being disclosed by a group of researchers from the ASSET (Automated Units SEcuriTy) Investigate Team at the Singapore University of Technology and Style and design (SUTD), who also formerly disclosed BrakTooth in September 2021 and SweynTooth in February 2020.

The assaults, in a nutshell, attempt to deceive a smartphone or a 5G-enabled gadget to connect a rogue base station (gNB), resulting in unintended implications.

“The attacker does not need to be mindful of any key data of the focus on UE e.g., UE’s SIM card specifics, to comprehensive the NAS network registration,” the scientists spelled out. “The attacker only needs to impersonate the genuine gNB applying the recognised Cell Tower link parameters.”

A threat actor can execute this by utilizing apps like Mobile-Pro to decide the Relative Sign Toughness Indicator (RSSI) readings and trick the person tools to hook up to the adversarial station (i.e., a software program-described radio) as very well as an reasonably priced mini Laptop.

Noteworthy among the the 14 flaws is CVE-2023-33042, which can allow an attacker within just radio variety to set off a 5G connectivity downgrade or a denial-of-provider (DoS) inside of Qualcomm’s X55/X60 modem firmware by sending malformed Radio Useful resource Control (RRC) frame to the concentrate on 5G machine from a close by destructive gNB.

Productive exploitation of the other DoS vulnerabilities could demand a guide reboot of the product to restore 5G connectivity.

Patches have been produced by each MediaTek and Qualcomm for 12 of the 14 flaws. Details of the two other vulnerabilities have been withheld due to confidentiality motives and are expected to be disclosed in the upcoming.

“Locating issues in the implementation of the 5G modem vendor greatly impacts product or service distributors downstream,” the scientists explained, adding that “it can normally choose six or much more months for 5G security patches to ultimately access the end-user through an OTA update.”

“This is mainly because the computer software dependency of product or service suppliers on the Modem / Chipset Seller provides complexity and therefore delays to the procedure of making and distributing patches to the conclude-consumer.”

Located this short article appealing? Observe us on Twitter  and LinkedIn to study a lot more exclusive material we article.

Some parts of this article are sourced from:
thehackernews.com