Weakness in Wi-Fi Protected Access Implementation in Various Products by Multiple Vendors
CVE-2017-13084

6.8MEDIUM

Key Information:

Vendor

Wi-fi Alliance

Status
Wi-fi Protected Access (WPa And WPa2)
Vendor
CVE Published:
17 October 2017

What is CVE-2017-13084?

The vulnerability in Wi-Fi Protected Access (WPA and WPA2) occurs during the PeerKey handshake, permitting the reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK). This flaw enables an adversary within the range of the network to exploit the handshake process by replaying, decrypting, or spoofing network frames. Such activities compromise the integrity and confidentiality of data transmitted over affected networks, making it essential for users and administrators to implement appropriate security measures.

Affected Version(s)

Wi-Fi Protected Access (WPA and WPA2) WPA

Wi-Fi Protected Access (WPA and WPA2) WPA2

References

http://www.securitytracker.com/id/1039581
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/101274
vdb-entryx_refsource_BID
https://access.redhat.com/security/vulnerabilities/kracks
x_refsource_CONFIRM

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.