Authentication Bypass in OpenThread Boarder Router devices

CVE-2023-2626

What is CVE-2023-2626?

An authentication bypass vulnerability has been identified in OpenThread border router devices and implementations. This flaw allows unauthenticated nodes to exploit 'Key ID Mode 2', which utilizes a static encryption key to circumvent security measures. As a result, arbitrary IP packets can be sent within the Thread network, enabling potential attackers to interact with devices on the local area network (LAN). If these devices do not have additional authentication or are susceptible to network vulnerabilities, they could be compromised, despite the protective measures typically provided by NAT firewalls in home routers. Google has implemented an automatic update to mitigate this vulnerability for affected devices.

References