WiFiDemon – iPhone Zero-click Wifi Hacking Flaw Can be Used to Execute Remote Code


According to the report, it says that wifid is a very delicate daemon that may guide the entire system to compromise. During the investigation, the security researcher, Carl Schou found that wifid has a concern of format string while handling SSID.

When it gets linked to a gain access to point with a specific name, just recently the mobile security specialists at zecOps have found a bug in the iPhone last month that intrudes wireless connection.

Wi-Fi is the crucial aspect for the smartphone, and wifid is a daemon that manages protocol linked with a Wi-Fi connection and it operates as a root.

This bug was dubbed as WiFiDemon, and it is a remote code execution vulnerability, and for carrying out operation it does not require any type of user intervention.


The Bug Was Worse Than it Was Assumed

Needs to the WiFi 0-Day Format Strings Attack.

Dont get connect with unknown Wi-Fi networks.
Through Settings– > WiFi– > Auto-Join Hotspot– > Never try to disable the WiFi Auto-Join feature.
In case you presume that you have been targeted then quickly perform danger and trade-off evaluation to your mobile/tablet security.
The vulnerability is a 0-day, and the iOS 14.6 is vulnerable when correlating to a particularly crafted SSID..
Wait for a reliable update by Apple and execute it as quickly as possible.

The security analysts have actually checked and validated that it has been impacted by the very same format string bug, which implies that it is a zero-click vulnerability and can be activated without an end-user connecting to a recently called wifi.

The WiFi format strings were seen to be a remote code execution, and while signing up with a destructive SSID the experts have noted it..

It requires the WiFi to be admissible with Auto-Join.
The vulnerable iOS Version applies for 0-click: Since iOS 14.0.
The 0-Click vulnerability was reinforced on iOS 14.4.


Necessities to the WiFiDemon 0-Click Attack.

The security experts are looking for another approach for making use of the vulnerability, according to the report, the experts have actually utilized “% @,” which is a format specifier for distribution and formatting targets in Objective-C, which is the programming language for iOS software application..

Lastly, the researchers have actually also proposed that up until and unless this bug is not getting repaired completely, prevent joining to any public WiFi networks or any hotspots, as doing so will help you to remain protected from this kind of security defect.


Initially upgrade to the most current variation, 14.6, as it bypasses the threat of WiFiDemon in its 0-click form..
Constantly choose disabling WiFi Auto-Join Feature through Settings– > WiFi– > Auto-Join Hotspot– > Never.
Conduct risk and compromise evaluation in your mobile/tablet security using ZecOps Mobile EDR in case you infer that you have actually been targeted.

Prior to continuing even more, let me validate the above heading, in short, this defect works even when the screen is off. There is a lot of things that have been found in this bug, and the cybersecurity researchers kept in mind that the bug can be a trigger as a zero-click, and it also has the possible to carry out remote code.

After investigating the entire matter, the analysts came to understand that wifid has interesting logs when it is not connected to any wifi. All these logs carry SSID, which intimates that they might be hit by the matching format string bug..

Analysis of a Zero-Click WiFi Vulnerability.