Lucene search

RedhatCVE-2014-3686

HistoryOct 16, 2014 - 12:55 a.m.

CVE-2014-3686

2014-10-1600:55:05

CWE-20

redhat

web.nvd.nist.gov

cve-2014-3686

wpa_supplicant

hostapd

remote attack

command execution

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.015

Percentile

87.2%

JSON

wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.

Affected configurations

Nvd

Node

w1.fihostapdMatch0.7.2

w1.fihostapdMatch1.0

w1.fihostapdMatch1.1

w1.fihostapdMatch2.0

w1.fihostapdMatch2.1

w1.fihostapdMatch2.2

w1.fiwpa_supplicantMatch0.72

w1.fiwpa_supplicantMatch1.0

w1.fiwpa_supplicantMatch1.1

w1.fiwpa_supplicantMatch2.0

w1.fiwpa_supplicantMatch2.1

w1.fiwpa_supplicantMatch2.2

canonicalubuntu_linuxMatch10.04-lts

canonicalubuntu_linuxMatch12.04-lts

canonicalubuntu_linuxMatch14.04lts

debiandebian_linuxMatch6.0

VendorProductVersionCPE
w1.fihostapd0.7.2cpe:2.3:a:w1.fi:hostapd:0.7.2:*:*:*:*:*:*:*
w1.fihostapd1.0cpe:2.3:a:w1.fi:hostapd:1.0:*:*:*:*:*:*:*
w1.fihostapd1.1cpe:2.3:a:w1.fi:hostapd:1.1:*:*:*:*:*:*:*
w1.fihostapd2.0cpe:2.3:a:w1.fi:hostapd:2.0:*:*:*:*:*:*:*
w1.fihostapd2.1cpe:2.3:a:w1.fi:hostapd:2.1:*:*:*:*:*:*:*
w1.fihostapd2.2cpe:2.3:a:w1.fi:hostapd:2.2:*:*:*:*:*:*:*
w1.fiwpa_supplicant0.72cpe:2.3:a:w1.fi:wpa_supplicant:0.72:*:*:*:*:*:*:*
w1.fiwpa_supplicant1.0cpe:2.3:a:w1.fi:wpa_supplicant:1.0:*:*:*:*:*:*:*
w1.fiwpa_supplicant1.1cpe:2.3:a:w1.fi:wpa_supplicant:1.1:*:*:*:*:*:*:*
w1.fiwpa_supplicant2.0cpe:2.3:a:w1.fi:wpa_supplicant:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
w1.fi	hostapd	0.7.2	cpe:2.3:a:w1.fi:hostapd:0.7.2:::::::*
w1.fi	hostapd	1.0	cpe:2.3:a:w1.fi:hostapd:1.0:::::::*
w1.fi	hostapd	1.1	cpe:2.3:a:w1.fi:hostapd:1.1:::::::*
w1.fi	hostapd	2.0	cpe:2.3:a:w1.fi:hostapd:2.0:::::::*
w1.fi	hostapd	2.1	cpe:2.3:a:w1.fi:hostapd:2.1:::::::*
w1.fi	hostapd	2.2	cpe:2.3:a:w1.fi:hostapd:2.2:::::::*
w1.fi	wpa_supplicant	0.72	cpe:2.3:a:w1.fi:wpa_supplicant:0.72:::::::*
w1.fi	wpa_supplicant	1.0	cpe:2.3:a:w1.fi:wpa_supplicant:1.0:::::::*
w1.fi	wpa_supplicant	1.1	cpe:2.3:a:w1.fi:wpa_supplicant:1.1:::::::*
w1.fi	wpa_supplicant	2.0	cpe:2.3:a:w1.fi:wpa_supplicant:2.0:::::::*