Beacon Handling Routine Vulnerability Leads to Remote Code Execution

CVE-2022-23088

What is CVE-2022-23088?

An issue exists in the FreeBSD Wi-Fi client that arises from improper validation of the length of an IEEE 802.11s Mesh ID in the beacon handling routine. When the client is in scanning mode and not connected to any SSID, a specially crafted malicious beacon frame can bypass security measures, allowing an attacker to overwrite critical regions of kernel memory. This vulnerability poses a significant risk as it may enable remote code execution, leading to potential unauthorized access or manipulation of the underlying system.

References