DeutschShown in its original language — a full translation is planned for a future version.
IEEE WPA2: Mehrere Schwachstellen
view advisory published 2017-10-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IEEE WPA2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-13088US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Slee… | ||||
| CVE-2017-13087US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Resp… | ||||
| CVE-2017-13086US | medium6.8OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio ran… | ||||
| CVE-2017-13084US | medium6.8OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radi… | ||||
| CVE-2017-13082US | high8.1OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) h… | ||||
| CVE-2017-13081US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attack… | ||||
| CVE-2017-13080US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames… | ||||
| CVE-2017-13079US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacke… | ||||
| CVE-2017-13078US | medium5.3OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… | ||||
| CVE-2017-13077US | medium6.8OT elevated | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio r… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2017:2907 vom 2017-10-17external
- Fortinet Advisory FG-IR-17-196 vom 2017-10-24external
- Oracle Linux Security Advisory ELSA-2017-2907 vom 2017-10-18external
- Meldung auf der OSS-Sec Mailing Liste vom 2017-10-16external
- Blackberry Advisory Article Number: 000046425external
- Ubuntu Security Notice USN-3455-1 vom 2017-10-16external
- Ubuntu Security Notice USN-3505-1 vom 2017-12-06external
- Red Hat Security Advisory RHSA-2017:2907 vom 2017-10-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan