Weak/Leaked WiFi Encryption in FW 1.5.2 ???

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Enable an SSID with the name RtO45Fh43
2. Chose Encryption-Mode WPA (2)
3. Should only be one SSID broadcasted with the chosen SSID..

What is the expected output? What do you see instead?
The SSID should be broadcasted only with the chosen SSID. But checking with 
kismet shows, that 4 channels are broadcasted (see attached file). And the SSID 
I chose with WPA2 Encryption is also broadcasted with WEP Encryption, what is 
really unsafe!

What version of the product are you using? On what operating system?
FW 1.5.2_beta

Please provide any additional information below.
File1: Settings in WUI
File2: Kismet found 4 Draytek. BSSIDs of my Vigor2130

Original issue reported on code.google.com by johannes...@gmail.com on 27 Jul 2011 at 12:00

Attachments:

• settings.png
• kismet.png

[GoogleCodeExporter]

I mean KisMac, not Kismet.

Link to KisMac to test your Wifi: http://kismac-ng.org/

Original comment by johannes...@gmail.com on 27 Jul 2011 at 12:05

[GoogleCodeExporter]

According to the BSSID, I guess only the first SSID 'RtO45Fh43' is broadcasted 
from your V2130 AP.
Maybe you can choose another SSID and channel and test that again.

Original comment by vincent....@gmail.com on 27 Jul 2011 at 10:19

[GoogleCodeExporter]

i have the only draytek product in place. no other draytek router is around in 
the neighborhood.

Original comment by johannes...@gmail.com on 27 Jul 2011 at 10:21

[GoogleCodeExporter]

And the BSSID is the same. As well the initial hardwareadress "00:50:7F:CD..." 
is the same.

Also the location is the same!

Original comment by johannes...@gmail.com on 27 Jul 2011 at 10:35

Attachments:

• Bildschirmfoto-2011-07-27-um-12.25.jpg

[GoogleCodeExporter]

I may be wrong, but KisMac appears to keep a history of seen networks (last 
seen).
You should probably empty the cache and check if it still finds that network.

Original comment by TheEvilO...@googlemail.com on 27 Jul 2011 at 1:18

[GoogleCodeExporter]

It is true that KisMac saves a history. But I have never had a WEB Encryption 
selected for my WiFi and the time-stamp for first seen is the same: 23:29.

And I made a second test: by turning off the router, both (WPA2 SSID and WEP 
SSID) disappear. So it must be my router.

Original comment by johannes...@gmail.com on 27 Jul 2011 at 1:22

[GoogleCodeExporter]

Maybe ssh into the router and post the output of the command "iwconfig"

Original comment by TheEvilO...@googlemail.com on 27 Jul 2011 at 5:06

[GoogleCodeExporter]

 \ \   / (_) __ _  ___  _ __  |___ \/ |___ / / _ \
  \ \ / /| |/ _` |/ _ \| '__|   __) | | |_ \| | | |
   \ V / | | (_| | (_) | |     / __/| |___) | |_| |
    \_/  |_|\__, |\___/|_|    |_____|_|____/ \___/
            |___/
 Firmware version ("v1.5.2_Beta")

 ---------------------------------------------------
root@Vigor2130:~# iwconfig
lo        no wireless extensions.

sit0      no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

fp        no wireless extensions.

eth0.1    no wireless extensions.

eth1.2    no wireless extensions.

br-lan    no wireless extensions.

ra0       iNIC AP  ESSID:"RtO45Fh43"  Nickname:""
          Mode:Master  Frequency:2.412 GHz  Access Point: 00:50:7F:CD:14:F0   
          Bit Rate=300 Mb/s   

ra1       iNIC AP  ESSID:"HT_AP1"  Nickname:""
          Mode:Master  Frequency:2.412 GHz  Access Point: 00:50:7F:CD:14:F1   
          Bit Rate=300 Mb/s   

ra2       iNIC AP  ESSID:"HT_AP2"  Nickname:""
          Mode:Master  Frequency:2.412 GHz  Access Point: 00:50:7F:CD:14:F2   
          Bit Rate=300 Mb/s   

ra3       iNIC AP  ESSID:"HT_AP3"  Nickname:""
          Mode:Master  Frequency:2.412 GHz  Access Point: 00:50:7F:CD:14:F3   
          Bit Rate=300 Mb/s   

br-wan    no wireless extensions.

Original comment by johannes...@gmail.com on 27 Jul 2011 at 10:10

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

The hardware address "00:50:7f:cd:14:f0" and "00:50:7f:cd:d4:9c" are not belong 
to the same device.
As you can see from the output of 'iwconfig', your BSSID is from f0~f3.
One possible reason is that "00:50:7f:cd:d4:9c" connect to your AP using 
repeater mode. ???
This is just a guess, I didn't do the test.
But I do test your case, the same configuration: SSID, channel....
And everything looks normal.
I would recommend you change the SSID and psk first and test that again.

Original comment by vincent....@gmail.com on 28 Jul 2011 at 4:12

Attachments:

• kis.jpg