{"id":2626,"date":"2021-07-24T18:11:13","date_gmt":"2021-07-24T12:41:13","guid":{"rendered":"https:\/\/xiarch.com\/blog\/?p=2626"},"modified":"2021-07-24T18:11:16","modified_gmt":"2021-07-24T12:41:16","slug":"apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot","status":"publish","type":"post","link":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/","title":{"rendered":"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot"},"content":{"rendered":"\n
Apple has deployed a new security update to discover dozens of iOS and macOS vulnerabilities, which includes a server iOS flaw know as WiFiDemon that probably lead to denial of services or arbitrary code execution.<\/p><\/p>\n\n\n\n
This WiFiDemon vulnerability, tracked as CVE-2021-30800 and a zero-day flaw when security researchers publicly revealed it, was fixed by Apple with the updated release of iOS 14.7 earlier this week. A successful exploitation world makes it possible to break an iPhone Wi-Fi process on connecting hotspots with SSIDs containing the special character with \u201c%\u201d such as (%p%s%s%n%n).<\/p><\/p>\n\n\n\n
Once encountered on a vulnerable iPhone, iPod, and iPad, the flaw would distribute it and is unable to establish Wi-Fi connections, even after rebooting or renaming the Wi-Fi hotspot. Fixing the Wi-FiDemon vulnerability need resetting of the network settings to remove all the name of the Wi-Fi networks, consisting up of rouge ones, from the lists of well-known SSIDs.<\/p><\/p>\n\n\n\n
How does zero-click RCE impact older versions of iOS?<\/strong><\/h2>\n\n\n\n
As researchers later found, the attackers could also run arbitrary code without even the user\u2019s permission when an unpatched device joined a rogue Wi-Fi hotspot with a maliciously designed SSID which includes the \u201c%@\u201d character such as (DDDDD%x%x%x%@)<\/p><\/p>\n\n\n\n
Fortunately, as mobile security startup ZecOps discovered, the zero-click remote code execution elements of WiFiDemon were only there starting with iOS 14.0 and was silently found by Apple with the release of iOS 14.4. Threat actors might exploit this error by generating new malicious Wi-Fi hotspots in well-known and mostly circulated areas to attack iPhone devices configured to auto-join new Wi-Fi networks.<\/p><\/p>\n\n\n\n
How to Reset Network Setting in iOS?<\/strong><\/h2>\n\n\n\n
If one doesn\u2019t want to or is unable to immediately update their iOS device to iOS 14.7 to protect it from WiFiDemon attacks, you are suggested to disable the Wi-Fi Auto-Join feature by clicking \u2018Never\u2019 on the Settings> Wi-Fi> Auto-Join Hotspot option.<\/p><\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\n
The flaw harm iPhone 6s and later, all iPad Pro models, iPad Air 2 and later, iPad 5th generation and further, iPad mini 4 and later, and iPod touch (7th generation), as Apple announces in a security advisory posted earlier this week.<\/p><\/p>\n\n\n\n
How Apple Patch the Flow of zero-days?<\/strong><\/h4>\n\n\n\n
Since March, Apple has been released security updates again and again to address an apparently endless wave of zero-day flaws \u2013 nine of them in total \u2013 most of them also exploited in the wild.<\/p><\/p>\n\n\n\n
In prior months, the organization fixed two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762) that \u201cmay have been currently exploited\u201d to hack into older iPhone, iPad, and iPod devices. Apple patched a macOS zero-day (CVE-2021-30713) in May, a vulnerability harmed by the XCSSET Trojan to avoid Apple\u2019s TCC protections designed to safeguard user\u2019s privacy.<\/p><\/p>\n\n\n\n
In the same month, Apple also fixed three other zero-days (CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666), flaws permitting for the arbitrary remote code execution (RCE) on vulnerable devices simply by going through malicious websites.<\/p><\/p>\n\n\n\n
An organization discovered one more iOS zero-day (CVE-2021-1879) in March and zero-days in iOS (CVE-2021-30661) and macOS (CVE-2021-30657) in April. The Shlayer macOS Trojan exploited the latter to avoid Apple\u2019s File Quarantine, Gatekeeper, and Notarization security checks and transmit second-stage malicious payloads on negotiated Macs. <\/p><\/p>\n","protected":false},"excerpt":{"rendered":"
Apple has deployed a new security update to discover dozens of iOS and macOS vulnerabilities, which includes a server iOS flaw know as WiFiDemon that probably lead to denial of services or arbitrary code execution. This WiFiDemon vulnerability, tracked as CVE-2021-30800 and a zero-day flaw when security researchers publicly revealed it, was fixed by Apple […]<\/p>\n","protected":false},"author":2,"featured_media":2629,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[],"yoast_head":"\n
Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot - Xiarch Solutions Private Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot - Xiarch Solutions Private Limited\" \/>\n<meta property=\"og:description\" content=\"Apple has deployed a new security update to discover dozens of iOS and macOS vulnerabilities, which includes a server iOS flaw know as WiFiDemon that probably lead to denial of services or arbitrary code execution. This WiFiDemon vulnerability, tracked as CVE-2021-30800 and a zero-day flaw when security researchers publicly revealed it, was fixed by Apple […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiarch Solutions Private Limited\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xiarch\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-24T12:41:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-07-24T12:41:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/07\/Apple-Fixes-Flaw-that-Breaks-iPhone-Wi-Fi-using-Rogue-Hotspot-featured-image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Xiarch Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xiarch\" \/>\n<meta name=\"twitter:site\" content=\"@xiarch\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Xiarch Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/\"},\"author\":{\"name\":\"Xiarch Security\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\"},\"headline\":\"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot\",\"datePublished\":\"2021-07-24T12:41:13+00:00\",\"dateModified\":\"2021-07-24T12:41:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/\"},\"wordCount\":548,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"articleSection\":[\"Vulnerabilities\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/\",\"url\":\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/\",\"name\":\"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot - Xiarch Solutions Private Limited\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#website\"},\"datePublished\":\"2021-07-24T12:41:13+00:00\",\"dateModified\":\"2021-07-24T12:41:16+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/xiarch.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/xiarch.com\/blog\/#website\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"name\":\"Xiarch Solutions Private Limited\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/xiarch.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\",\"name\":\"Xiarch\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"contentUrl\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"width\":300,\"height\":300,\"caption\":\"Xiarch\"},\"image\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/xiarch\/\",\"https:\/\/twitter.com\/xiarch\",\"https:\/\/www.linkedin.com\/company\/xiarch\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\",\"name\":\"Xiarch Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"caption\":\"Xiarch Security\"},\"sameAs\":[\"https:\/\/xiarch.com\/blog\/\"],\"url\":\"https:\/\/xiarch.com\/blog\/author\/vector\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot - Xiarch Solutions Private Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/","og_locale":"en_US","og_type":"article","og_title":"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot - Xiarch Solutions Private Limited","og_description":"Apple has deployed a new security update to discover dozens of iOS and macOS vulnerabilities, which includes a server iOS flaw know as WiFiDemon that probably lead to denial of services or arbitrary code execution. This WiFiDemon vulnerability, tracked as CVE-2021-30800 and a zero-day flaw when security researchers publicly revealed it, was fixed by Apple […]","og_url":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/","og_site_name":"Xiarch Solutions Private Limited","article_publisher":"https:\/\/www.facebook.com\/xiarch\/","article_published_time":"2021-07-24T12:41:13+00:00","article_modified_time":"2021-07-24T12:41:16+00:00","og_image":[{"width":1000,"height":525,"url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/07\/Apple-Fixes-Flaw-that-Breaks-iPhone-Wi-Fi-using-Rogue-Hotspot-featured-image.jpg","type":"image\/jpeg"}],"author":"Xiarch Security","twitter_card":"summary_large_image","twitter_creator":"@xiarch","twitter_site":"@xiarch","twitter_misc":{"Written by":"Xiarch Security","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#article","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/"},"author":{"name":"Xiarch Security","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c"},"headline":"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot","datePublished":"2021-07-24T12:41:13+00:00","dateModified":"2021-07-24T12:41:16+00:00","mainEntityOfPage":{"@id":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/"},"wordCount":548,"commentCount":0,"publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"articleSection":["Vulnerabilities"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/","url":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/","name":"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot - Xiarch Solutions Private Limited","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/#website"},"datePublished":"2021-07-24T12:41:13+00:00","dateModified":"2021-07-24T12:41:16+00:00","breadcrumb":{"@id":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/xiarch.com\/blog\/apple-fixes-flaw-that-breaks-iphone-wi-fi-using-rogue-hotspot\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiarch.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Apple Fixes Flaw that Breaks iPhone Wi-Fi using Rogue Hotspot"}]},{"@type":"WebSite","@id":"https:\/\/xiarch.com\/blog\/#website","url":"https:\/\/xiarch.com\/blog\/","name":"Xiarch Solutions Private Limited","description":"","publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiarch.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiarch.com\/blog\/#organization","name":"Xiarch","url":"https:\/\/xiarch.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","contentUrl":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","width":300,"height":300,"caption":"Xiarch"},"image":{"@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/xiarch\/","https:\/\/twitter.com\/xiarch","https:\/\/www.linkedin.com\/company\/xiarch"]},{"@type":"Person","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c","name":"Xiarch Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","caption":"Xiarch Security"},"sameAs":["https:\/\/xiarch.com\/blog\/"],"url":"https:\/\/xiarch.com\/blog\/author\/vector\/"}]}},"_links":{"self":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2626"}],"collection":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/comments?post=2626"}],"version-history":[{"count":1,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2626\/revisions"}],"predecessor-version":[{"id":2630,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2626\/revisions\/2630"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media\/2629"}],"wp:attachment":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media?parent=2626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/categories?post=2626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/tags?post=2626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/07\/Apple-Fixes-Flaw-that-Breaks-iPhone-Wi-Fi-using-Rogue-Hotspot-image1-1024x571.jpg\")
<\/figure><\/div>\n\n\n\n