Frag Attack Vulnerability Information

FragAttacks (fr*agmentation and *ag*gregation *attacks) which is a collection of new security vulnerabilities that affect Wi-Fi devices. An adversary that is within range of a victim's Wi-Fi network can abuse these vulnerabilities to steal user information or attack devices. 

Recently, a set of Wi-Fi vulnerabilities, commonly known as “Frag Attacks” were identified. Zebra is aware of these vulnerabilities and is scoping the impact to our products (i.e. handhelds, scanners, and printers).

Zebra devices use Wi-Fi radios provided by third party suppliers. Addressing these vulnerabilities will require an update to these third-party radios. Currently, Zebra is awaiting information from these vendors on their update plans. As this information becomes available, Zebra will update this notice with details on affected products and mitigation plans.

For more information, please click here.

SUPPORT PAGES FOR IMPACTED PRODUCTS:

Operating System Affected Product Release Date
Android 11 All Product 30th September 2021
Android 10 Handheld computer models:
EC30EC50EC55MC2200MC2700MC9300PS20
Touch computer models: 
TC21, TC26TC52TC52xTC57TC57xTC72TC77TC8300
Tablets: 
ET51ET56L10
Wearable: 
WT6300
RFID scanner: 
MC3300x
Health Care Touch computers models: 
TC21-HCTC26-HCTC52-HCTC52x-HC
Vehicle-mounted device: 
VC8300
Interactive kiosks: 
CC600CC6000
31st August 2021
Android 9 All Product 31st October 2021
Android 8.1 All Product 30th September 2021
N/A Zebra Printer with Wi-Fi TBD
N/A Zebra Scanners with Wi-fi TBD

Disclaimer: Zebra makes every attempt to release security updates on or about the time that Google releases its respective security bulletin. However, delivery time of security updates may vary depending on the region, product model, and third party software suppliers. Under some circumstances, the OS must be updated to the latest maintenance release prior to installing the security updates. Individual product updates will provide specific guidance.

Unless otherwise noted, there have been no reports of active customer exploitation or abuse from these newly reported issues.



Are you aware of a potential security issue with a Zebra Technologies product?