CVE-2017-13082: vulnerability in Wi-Fi Protected Access (WPA and WPA2)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.6%
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Affected products
Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2)Related CVEs — Wi-Fi Protected Access (WPA and WPA2)
In the same product, most dangerous first.
References
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.htmlhttps://access.redhat.com/errata/RHSA-2017:2907https://access.redhat.com/security/vulnerabilities/krackshttps://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdfhttps://cert.vde.com/en-us/advisories/vde-2017-005https://github.com/vanhoefm/krackattacks-test-ap-fthttps://ics-cert.us-cert.gov/advisories/ICSA-17-299-02https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1066697https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.aschttps://security.gentoo.org/glsa/201711-03https://source.android.com/security/bulletin/2017-11-01https://support.lenovo.com/us/en/product_security/LEN-17420