CVE-2019-9495CWE-524

CVE-2019-9495: fallo en Wi-Fi Alliance wpa_supplicant with EAP-pwd…

The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear hostapd with EAP-pwd support+ Monitorear wpa supplicant with EAP-pwd support

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 3.5%
The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
Productos afectados
Wi-Fi Alliance · hostapd with EAP-pwd supportWi-Fi Alliance · wpa_supplicant with EAP-pwd support
CVEs relacionadas — Wi-Fi Alliance wpa_supplicant with EAP-pwd…

En el mismo producto, de las más peligrosas a las menos.

CVE-2019-9497—The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitEPSS 5.0%CVE-2019-9499—The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitEPSS 2.2%CVE-2019-9498—The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitEPSS 2.2%