WPS vulnerability on EZCast 5G!!!

Discuss EZCast Questions & Bugs & Wishlist。

Moderator: Henry Chou

Andrea D'Angelo
Posts: 2
Joined: Tue Jul 28, 2015 1:02 am

WPS vulnerability on EZCast 5G!!!

Postby Andrea D'Angelo » Tue Jul 28, 2015 3:59 pm

Hello all,
I just received my new EZCast 5g, and immediatly I saw that the WPA2 WI-FI connection offers WPS authentication facility.
I checked on EZCast for a WPS button and I don't find it: not so bad, until I tried to check if the WPS is vulnerable, and..
..it is! I was able to get the password of EzCast through a simple Apk (WPS WPA Tester) in less than 10 seconds, without knowing it (and the same could be done by my neighbors).

Then, my questions:
- Why WPS is enabled if I don't have a WPS button on EZCast?
- How I could disable the WPS protocol on my EZCast?

Thank you!

Simon Lee
Posts: 4
Joined: Wed Jul 29, 2015 10:03 am

Re: WPS vulnerability on EZCast 5G!!!

Postby Simon Lee » Wed Jul 29, 2015 10:07 am

Hello,

Thanks for your professional concern. WPS is reserved for the future use, so basically you can just ignore this. As for the current firmware version, we enable this for default configuration and sorry to say that there is no way to disable. Really appreciate for your understanding and sorry for causing confusion.

Henry Chou
Posts: 657
Joined: Tue Jun 30, 2015 4:36 pm

Re: WPS vulnerability on EZCast 5G!!!

Postby Henry Chou » Thu Jul 30, 2015 12:14 am

Dear Andrea:

In our next firmware update, we will fix WPS issue for security. Thanks for your precious feedback and thanks for your understanding.

Best Regards,
EZCast: Henry

Andrea D'Angelo
Posts: 2
Joined: Tue Jul 28, 2015 1:02 am

Re: WPS vulnerability on EZCast 5G!!!

Postby Andrea D'Angelo » Thu Jul 30, 2015 1:44 am

Hello Henry and Simon,
thank you for your answers, I'll wait the firmware update.

Please, take care we can disable WPS, because, also if it will not simply vulnerable as now, it will be always vulnerable to a brute force attack in few time.

Thank you,
Andrea


Return to “EZCast Questions & Bugs & Wishlist”