Above: Image by sdecoret/DepositPhotos

The website fragattacks.com aggregates information about vulnerabilities, (fragmentation and aggregation attacks) which can affect WiFi devices. According to the website, every Wi-Fi product has at least one vulnerability and some have several, the result of programming errors in the hardware.

The problem, the result of WiFi design flaws that date back to 1997, require very specific protocols to expose a user to vulnerabilities.
Local providers Flow and TSTT, who deliver internet access using routers with built in WiFi capabilities, were asked about their regime of updates and protection for these devices, which are not accessible at a deep level by the average home user.

Flow

Flow stated that, “As part of our proactive maintenance programme, regular updates are done on our modems with the latest available software versions.”
“This ensures that the most-recent fixes for bugs and security vulnerabilities are installed.”

TSTT

“After reviewing the threats highlighted by fragattacks.com,” TSTT stated in its response, “the Company notes the researcher’s own assessment of the low risk to most everyday consumers and the special circumstances required for culprits to actually execute this threat.”

“Notwithstanding, TSTT has a programme in place for updates to Customer Premises Equipment (CPE).” “This programme is focused on ensuring that these devices have the latest firmware to protect the customer and improve their overall experience.”
“All updates provided by the vendor, including those which cover security exposure, are incorporated under these upgrade exercises.”

“At TSTT, vendor selection is a meticulous and rigorous process. When CPE vendors provide upgrades or send out patches in response to security concerns, TSTT pushes them to the network as they are made available.”

“In addition, if any vulnerabilities are discovered as part of the Company’s maintenance or management of the system, they are immediately brought to the attention of the vendors to create the necessary solutions to fix these issues.”