DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
IEEE WPA2: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2017-10-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IEEE WPA2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-13088US | medium5.3OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Slee… | ||||
| CVE-2017-13087US | medium5.3OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Resp… | ||||
| CVE-2017-13086US | medium6.8OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio ran… | ||||
| CVE-2017-13084US | medium6.8OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radi… | ||||
| CVE-2017-13082US | high8.1OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) h… | ||||
| CVE-2017-13081US | medium5.3OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attack… | ||||
| CVE-2017-13080US | medium5.3OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames… | ||||
| CVE-2017-13079US | medium5.3OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacke… | ||||
| CVE-2017-13078US | medium5.3OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… | ||||
| CVE-2017-13077US | medium6.8OT erhöht | — | ||
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio r… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CentOS Security Advisory CESA-2017:2907 vom 2017-10-17external
- Fortinet Advisory FG-IR-17-196 vom 2017-10-24external
- Oracle Linux Security Advisory ELSA-2017-2907 vom 2017-10-18external
- Meldung auf der OSS-Sec Mailing Liste vom 2017-10-16external
- Blackberry Advisory Article Number: 000046425external
- Ubuntu Security Notice USN-3455-1 vom 2017-10-16external
- Ubuntu Security Notice USN-3505-1 vom 2017-12-06external
- Red Hat Security Advisory RHSA-2017:2907 vom 2017-10-18external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan