CVE-2017-13088CWE-323

CVE-2017-13088: vulnerability in Wi-Fi Protected Access (WPA and WPA2)

Published · Updated

Follow this CVE+ Monitor Wi-Fi Protected Access+ Monitor wpa

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
Affected products
Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2)
Related CVEs — Wi-Fi Protected Access (WPA and WPA2)

In the same product, most dangerous first.

CVE-2017-13082—CVE-2017-13082EPSS 4.6%CVE-2017-13077—CVE-2017-13077EPSS 2.4%CVE-2017-13080—CVE-2017-13080EPSS 2.3%CVE-2017-13084—CVE-2017-13084EPSS 2.2%CVE-2017-13079—CVE-2017-13079EPSS 2.1%CVE-2017-13078—CVE-2017-13078EPSS 2.1%