Weakness in Wi-Fi Protected Access Implementation in Various Products by Multiple Vendors
CVE-2017-13084

6.8MEDIUM

Key Information:

Vendor

Wi-fi Alliance

Status
Wi-fi Protected Access (WPa And WPa2)
Vendor
CVE Published:
17 October 2017

What is CVE-2017-13084?

The vulnerability in Wi-Fi Protected Access (WPA and WPA2) occurs during the PeerKey handshake, permitting the reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK). This flaw enables an adversary within the range of the network to exploit the handshake process by replaying, decrypting, or spoofing network frames. Such activities compromise the integrity and confidentiality of data transmitted over affected networks, making it essential for users and administrators to implement appropriate security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Wi-Fi Protected Access (WPA and WPA2) WPA

Wi-Fi Protected Access (WPA and WPA2) WPA2

References

http://www.securitytracker.com/id/1039581
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/101274
vdb-entryx_refsource_BID
https://access.redhat.com/security/vulnerabilities/kracks
x_refsource_CONFIRM

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.