Most recent entries from all

bdu:2017-02268

Withdrawn: BELL-CVE-2017-13082 — CVE-2017-13082 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2017-ale-014 — Plusieurs vulnérabilités ont été découvertes dans WPA/WPA2. Il est possible lors de l'établissement d'une session de co…

certfr-2017-ale-014

certfr-2017-avi-358 — De multiples vulnérabilités ont été découvertes dans Debian sur le protocole WPA/WPA2. Elles permettent à un attaquant…

certfr-2017-avi-358

cnvd-2017-30401

EUVD-2026-77548

fkie_cve-2017-13082

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

GHSA-fx3c-8pqx-5v4c

gsd-2017-13082

ICSA-17-299-02 — Rockwell Automation Stratix 5100 (Update A)

Key reinstallation attacks (KRACK) work against the four-way handshake of the WPA2 protocol. KRACK takes advantage of the retransmission of a handshake message to prompt the installation of the same encryption key every time it receives message 3 from the access point. Retransmission of the handshake message from the access point occurs if a proper client acknowledgement is not received to the initial message; retransmission resets the nonce value and replay counter to their initial values. A malicious actor could force these nonce resets by replaying the appropriate handshake message, which could allow for injection and decryption of arbitrary packets, hijacking of TCP connections, injection of HTTP content, or replaying of unicast or multicast data frames on the targeted device.CVE-2017-13082 has been assigned to this vulnerability. A CVSS v3 base score of 6.9 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N).

openSUSE-SU-2020:0222-1 — Security update for hostapd

Security update for hostapd

SUSE-SU-2020:3380-1 — Security update for wpa_supplicant

Security update for wpa_supplicant

UBUNTU-CVE-2017-13082

Affected: Ubuntu:14.04:LTS: wpa, Ubuntu:16.04:LTS: wpa

VDE-2017-005 — Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption

Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. ecom instruments is a subsidiary company of PEPPERL+FUCHS.

VDE-2019-005 — Endress+Hauser: WIFI enabled products utilising WPA2

Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. The Field Xpert SFX370 and SFX350 handhelds are manufactured by Pepperl+Fuchs/ecom instruments for Endress+Hauser. The Advisory for Pepperl+Fuchs/ecom instruments can be found here: VDE-2017-005

WID-SEC-W-2025-0369 — IEEE WPA2: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IEEE WPA2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.