critical WPA2 vulnerabilities afoot, see KRACK attacks (discussion @ /r/KRaCK, HN, /r/netsec, Slashdot)

AzureWave AW-NE773

From WikiDevi
Jump to: navigation, search

AzureWave AW-NE773

FCC approval date: 20 March 2008

Interface: Mini PCIe (half)

ID: 168c:002a (21 addl. devices) SS: 1a3b:1081
Windows: PCI\VEN_168C&DEV_002A&SUBSYS_10811A3B

FCC ID: PPD-AR5BHB92

WI1 chip1: Atheros AR9280

Additional chips
2.4/5GHz Front End Module;Skyworks;SE2593A20;SiGe, 2593A20, 033EQHF;2;

Probable Linux driver
ath9k (in backports)
PCI ID first seen in kernel v2.6.27 (2008-10-09)
(see also passys)

Windows driver
see ath-drivers.eu
(Win 7/8/10)

Antenna connector: U.FL

abgn, 2x2:2

OUI: 00:25:D3 (-, 5 W, 2008), 48:5D:60 (-, 5 W, 2008)

 FCC ID
Atheros AR5BHB92PPD-AR5BHB92
PPD-AR5BHB92-F
PPD-AR5BHB92-H
PPD-AR5BHB92-D
Dell Wireless 1515 (DW1515)PPD-AR5BHB92
PPD-AR5BHB92-D
Lite-On WN6502AH (HP)PPD-AR5BHB92-H
PPD-AR5BHB92
Unex DNXA-92NUK-DNXA92
PPD-AR5BHB92
For a list of all currently documented Atheros chipsets with specifications, see Atheros.



This is a dual-band device, and as is typical of Atheros retail units, examples seen all appear to have a World Roaming regulatory domain code set in the EEPROM.

This device is used in the Chrome CR-48 notebook (Chromebook).

Pictures from a CR-48 teardown

lspci -nnv dump[edit]

05:00.0 Network controller [0280]: Qualcomm Atheros AR928X Wireless Network Adapter (PCI-Express) [168c:002a] (rev 01)
        Subsystem: AzureWave AW-NE773 802.11abgn Wireless Half-size Mini PCIe Card [AR9280] [1a3b:1081]
        Physical Slot: 1
        Flags: fast devsel, IRQ 19
        Memory at f1d00000 (64-bit, non-prefetchable) [disabled] [size=64K]
        Capabilities: [40] Power Management version 2
        Capabilities: [50] MSI: Enable- Count=1/1 Maskable- 64bit-
        Capabilities: [60] Express Legacy Endpoint, MSI 00
        Capabilities: [90] MSI-X: Enable- Count=1 Masked-
        Capabilities: [100] Advanced Error Reporting
        Capabilities: [140] Virtual Channel
        Capabilities: [160] Device Serial Number 00-00-00-00-00-00-00-00
        Kernel driver in use: ath9k

dmesg output[edit]

pci 0000:05:00.0: [168c:002a] type 00 class 0x028000
pci 0000:05:00.0: reg 0x10: [mem 0x00000000-0x0000ffff 64bit]
pci 0000:05:00.0: supports D1
pci 0000:05:00.0: PME# supported from D0 D1 D3hot
pci 0000:05:00.0: BAR 0: assigned [mem 0xf1d00000-0xf1d0ffff 64bit]
pci 0000:05:00.0: no hotplug settings from platform
ath9k 0000:05:00.0: enabling device (0000 -> 0002)
ath: EEPROM regdomain: 0x60
ath: EEPROM indicates we should expect a direct regpair map
ath: Country alpha2 being used: 00
ath: Regpair used: 0x60
ieee80211 phy3: Selected rate control algorithm 'minstrel_ht'
ieee80211 phy3: Atheros AR9280 Rev:2 mem=0xffffc90007be0000, irq=19

cat /sys/kernel/ieee80211/phyX/ath9k/base_eeprom[edit]

mTOR ath9k # cat base_eeprom 
       Major Version :         14
       Minor Version :         16
            Checksum :      11280
              Length :       3256
          RegDomain1 :         96
          RegDomain2 :         31
             TX Mask :          3
             RX Mask :          3
          Allow 5GHz :          1
          Allow 2GHz :          1
   Disable 2GHz HT20 :          0
   Disable 2GHz HT40 :          0
   Disable 5Ghz HT20 :          0
   Disable 5Ghz HT40 :          0
          Big Endian :          0
   Cal Bin Major Ver :          0
   Cal Bin Minor Ver :          7
       Cal Bin Build :         13
 OpenLoop Power Ctrl :          0
          MacAddress : 48:5d:60:xx:xx:xx

RF Power[edit]

802.11a: 12 dBm at 54 Mbps / 17dBm at 6Mbps +/- 1 dBm
802.11b: 18 dBm at all rates +/- 1 dBm
802.11g: 15 dBm at 54Mbps / 17dBm at 6Mbps +/- 1 dBm
802.11n 5G HT20 : 9 dBm at MCS15 / 17dBm at MCS0 +/- 1 dBm
802.11n 5G HT40 : 9 dBm at MCS15 / 17dBm at MCS0 +/- 1 dBm
802.11n 2.4G HT20 : 10 dBm at MCS15 / 17dBm at MCS0 +/- 1 dBm
802.11n 2.4G HT40 : 9 dBm at MCS15 / 17dBm at MCS0 +/- 1 dBm

RF Sensitivity[edit]

802.11a: -67 dBm
802.11b: -78 dBm
802.11g: -67 dBm
802.11n: -67 dBm at HT20 MCS15 / -64 dBm at HT40 MCS15