https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:17:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-01161 bdu:2020-01161 https://cve.radiocsirt.org/vuln/bdu:2020-01161 https://cve.radiocsirt.org/vuln/certfr-2020-avi-494 certfr-2020-avi-494 https://cve.radiocsirt.org/vuln/certfr-2020-avi-494 https://cve.radiocsirt.org/vuln/cisco-sa-20200226-wi-fi-info-disclosure <p>On February 26th, 2020, researchers Štefan Svorencík and Robert Lipovsky disclosed a vulnerability in the implementation of the wireless egress packet processing of certain Broadcom Wi-Fi chipsets. This vulnerability could allow an unauthenticated, adjacent attacker to decrypt Wi-Fi frames without the knowledge of the Wireless Protected Access (WPA) or Wireless Protected Access 2 (WPA2) Pairwise Temporal Key (PTK) used to secure the Wi-Fi network. The vulnerability exists because after an affected device handles a disassociation event it could send a limited number of Wi-Fi frames encrypted with a static, weak PTK. An attacker could exploit this vulnerability by acquiring these frames and decrypting them with the static PTK. A successful exploit could allow the attacker to decrypt Wi-Fi frames without the knowledge of the security session establishment used to secure the Wi-Fi network. Multiple Cisco wireless products are affected by this vulnerability. Cisco will release software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure&#34;]</p> <p>On February 26th, 2020, researchers Štefan Svorencík and Robert Lipovsky disclosed a vulnerability in the implementation of the wireless egress packet processing of certain Broadcom Wi-Fi chipsets. This vulnerability could allow an unauthenticated, adjacent attacker to decrypt Wi-Fi frames without the knowledge of the Wireless Protected Access (WPA) or Wireless Protected Access 2 (WPA2) Pairwise Temporal Key (PTK) used to secure the Wi-Fi network. The vulnerability exists because after an affected device handles a disassociation event it could send a limited number of Wi-Fi frames encrypted with a static, weak PTK. An attacker could exploit this vulnerability by acquiring these frames and decrypting them with the static PTK. A successful exploit could allow the attacker to decrypt Wi-Fi frames without the knowledge of the security session establishment used to secure the Wi-Fi network. Multiple Cisco wireless products are affected by this vulnerability. Cisco will release software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-wi-fi-info-disclosure&#34;]</p> https://cve.radiocsirt.org/vuln/cisco-sa-20200226-wi-fi-info-disclosure https://cve.radiocsirt.org/vuln/cnvd-2020-18530 cnvd-2020-18530 https://cve.radiocsirt.org/vuln/cnvd-2020-18530 https://cve.radiocsirt.org/vuln/euvd-2026-56841 EUVD-2026-56841 https://cve.radiocsirt.org/vuln/euvd-2026-56841 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15126 <p>An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.</p> <p>An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-15126 https://cve.radiocsirt.org/vuln/ghsa-p2g8-8j8x-3728 <p>An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.</p> <p>An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.</p> https://cve.radiocsirt.org/vuln/ghsa-p2g8-8j8x-3728 https://cve.radiocsirt.org/vuln/gsd-2019-15126 gsd-2019-15126 https://cve.radiocsirt.org/vuln/gsd-2019-15126 https://cve.radiocsirt.org/vuln/icsa-20-224-05 <p>An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic.</p> <p>An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic.</p> https://cve.radiocsirt.org/vuln/icsa-20-224-05 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1648-1 <p>Security update for kernel-firmware</p> <p>Security update for kernel-firmware</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1648-1 https://cve.radiocsirt.org/vuln/suse-su-2021:4003-1 <p>Security update for bcm43xx-firmware</p> <p>Security update for bcm43xx-firmware</p> https://cve.radiocsirt.org/vuln/suse-su-2021:4003-1 https://cve.radiocsirt.org/vuln/vde-2020-014 <p>Security researchers at ESET have reported a vulnerability called Kr00k (CVE-2019- 15126) which affects encrypted WiFi traffic for devices using Broadcom or Cypress chipsets. The vulnerability may allow an attacker to decrypt some WPA2- Personal/Enterprise traffic by forcing an AP/client to start utilizing an all-zero encryption key (similar to KRACK vulnerability).</p> <p>Security researchers at ESET have reported a vulnerability called Kr00k (CVE-2019- 15126) which affects encrypted WiFi traffic for devices using Broadcom or Cypress chipsets. The vulnerability may allow an attacker to decrypt some WPA2- Personal/Enterprise traffic by forcing an AP/client to start utilizing an all-zero encryption key (similar to KRACK vulnerability).</p> https://cve.radiocsirt.org/vuln/vde-2020-014