CVE-2021-37964

Vulnerability

An inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allows an attacker with a rogue wireless access point to potentially carry out a WiFi impersonation attack via a crafted ONC (Open Network Configuration) file. The vulnerability resides in how the system processes ONC files, which are used to configure network settings.

Exploitation

An attacker must set up a rogue wireless access point within range of the target device and deliver a specially crafted ONC file to the victim. The user may need to connect to the rogue AP or manually import the malicious ONC file for the attack to succeed. No authentication or special privileges are required beyond proximity and the ability to serve the crafted file.

Impact

Successful exploitation allows the attacker to impersonate a legitimate WiFi network, potentially enabling man-in-the-middle attacks, interception of network traffic, and theft of sensitive information such as credentials or session tokens.

Mitigation

The issue is fixed in Chrome version 94.0.4606.54 for ChromeOS. Users should update to this version or later. No workarounds have been published, and the vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog.