Lucene search

CertccCVE-2017-13077

HistoryOct 17, 2017 - 2:29 a.m.

CVE-2017-13077

2017-10-1702:29:00

CWE-330

certcc

web.nvd.nist.gov

246

cve-2017-13077

wi-fi

wpa

wpa2

vulnerability

key reinstallation

nvd

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.8

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

53.1%

JSON

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Affected configurations

Nvd

Node

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch16.04lts

canonicalubuntu_linuxMatch17.04

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

freebsdfreebsd

freebsdfreebsdMatch10

freebsdfreebsdMatch10.4

freebsdfreebsdMatch11

freebsdfreebsdMatch11.1

opensuseleapMatch42.2

opensuseleapMatch42.3

redhatenterprise_linux_desktopMatch7

redhatenterprise_linux_serverMatch7

Node

w1.fihostapdMatch0.2.4

w1.fihostapdMatch0.2.5

w1.fihostapdMatch0.2.6

w1.fihostapdMatch0.2.8

w1.fihostapdMatch0.3.7

w1.fihostapdMatch0.3.9

w1.fihostapdMatch0.3.10

w1.fihostapdMatch0.3.11

w1.fihostapdMatch0.4.7

w1.fihostapdMatch0.4.8

w1.fihostapdMatch0.4.9

w1.fihostapdMatch0.4.10

w1.fihostapdMatch0.4.11

w1.fihostapdMatch0.5.7

w1.fihostapdMatch0.5.8

w1.fihostapdMatch0.5.9

w1.fihostapdMatch0.5.10

w1.fihostapdMatch0.5.11

w1.fihostapdMatch0.6.8

w1.fihostapdMatch0.6.9

w1.fihostapdMatch0.6.10

w1.fihostapdMatch0.7.3

w1.fihostapdMatch1.0

w1.fihostapdMatch1.1

w1.fihostapdMatch2.0

w1.fihostapdMatch2.1

w1.fihostapdMatch2.2

w1.fihostapdMatch2.3

w1.fihostapdMatch2.4

w1.fihostapdMatch2.5

w1.fihostapdMatch2.6

w1.fiwpa_supplicantMatch0.2.4

w1.fiwpa_supplicantMatch0.2.5

w1.fiwpa_supplicantMatch0.2.6

w1.fiwpa_supplicantMatch0.2.7

w1.fiwpa_supplicantMatch0.2.8

w1.fiwpa_supplicantMatch0.3.7

w1.fiwpa_supplicantMatch0.3.8

w1.fiwpa_supplicantMatch0.3.9

w1.fiwpa_supplicantMatch0.3.10

w1.fiwpa_supplicantMatch0.3.11

w1.fiwpa_supplicantMatch0.4.7

w1.fiwpa_supplicantMatch0.4.8

w1.fiwpa_supplicantMatch0.4.9

w1.fiwpa_supplicantMatch0.4.10

w1.fiwpa_supplicantMatch0.4.11

w1.fiwpa_supplicantMatch0.5.7

w1.fiwpa_supplicantMatch0.5.8

w1.fiwpa_supplicantMatch0.5.9

w1.fiwpa_supplicantMatch0.5.10

w1.fiwpa_supplicantMatch0.5.11

w1.fiwpa_supplicantMatch0.6.8

w1.fiwpa_supplicantMatch0.6.9

w1.fiwpa_supplicantMatch0.6.10

w1.fiwpa_supplicantMatch0.7.3

w1.fiwpa_supplicantMatch1.0

w1.fiwpa_supplicantMatch1.1

w1.fiwpa_supplicantMatch2.0

w1.fiwpa_supplicantMatch2.1

w1.fiwpa_supplicantMatch2.2

w1.fiwpa_supplicantMatch2.3

w1.fiwpa_supplicantMatch2.4

w1.fiwpa_supplicantMatch2.5

w1.fiwpa_supplicantMatch2.6

Node

suselinux_enterprise_desktopMatch12sp2

suselinux_enterprise_desktopMatch12sp3

suselinux_enterprise_point_of_saleMatch11sp3

suselinux_enterprise_serverMatch11sp3ltss

suselinux_enterprise_serverMatch11sp4

suselinux_enterprise_serverMatch12ltss

suseopenstack_cloudMatch6

VendorProductVersionCPE
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
canonicalubuntu_linux16.04cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
canonicalubuntu_linux17.04cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*
debiandebian_linux8.0cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
debiandebian_linux9.0cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
freebsdfreebsd*cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
freebsdfreebsd10cpe:2.3:o:freebsd:freebsd:10:*:*:*:*:*:*:*
freebsdfreebsd10.4cpe:2.3:o:freebsd:freebsd:10.4:*:*:*:*:*:*:*
freebsdfreebsd11cpe:2.3:o:freebsd:freebsd:11:*:*:*:*:*:*:*
freebsdfreebsd11.1cpe:2.3:o:freebsd:freebsd:11.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
canonical	ubuntu_linux	16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::
canonical	ubuntu_linux	17.04	cpe:2.3:o:canonical:ubuntu_linux:17.04:::::::*
debian	debian_linux	8.0	cpe:2.3:o:debian:debian_linux:8.0:::::::*
debian	debian_linux	9.0	cpe:2.3:o:debian:debian_linux:9.0:::::::*
freebsd	freebsd	*	cpe:2.3:o:freebsd:freebsd::::::::
freebsd	freebsd	10	cpe:2.3:o:freebsd:freebsd:10:::::::*
freebsd	freebsd	10.4	cpe:2.3:o:freebsd:freebsd:10.4:::::::*
freebsd	freebsd	11	cpe:2.3:o:freebsd:freebsd:11:::::::*
freebsd	freebsd	11.1	cpe:2.3:o:freebsd:freebsd:11.1:::::::*

Rows per page:

1-10 of 851

CNA Affected

[
  {
    "product": "Wi-Fi Protected Access (WPA and WPA2)",
    "vendor": "Wi-Fi Alliance",
    "versions": [
      {
        "status": "affected",
        "version": "WPA"
      },
      {
        "status": "affected",
        "version": "WPA2"
      }
    ]
  }
]