Threats tagged 'ghsa-hrfx-qmg2-hmmr'

Certain Freebox models with specific firmware versions expose subscribers' IMSI identifiers in plaintext during the initial EAP-SIM authentication phase on the FreeWifi_secure network. This exposure occurs during the EAP-Response/Identity exchange where the full Network Access Identifier containing the IMSI is transmitted without encryption or pseudonymization. An attacker within Wi-Fi range can passively capture these identifiers, enabling device tracking and long-term monitoring. The vendor has acknowledged this issue and plans to fully deactivate the FreeWifi_secure service by 1 October 2025.