CVE-2023-52160

mediumPriorität · verfolgen · 36EPSS 0.012 · 67. PerzentilExploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

1.18% (67th) EPSS

CVSS 6.5 · medium

Is it mine?

45 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenwpa_supplicant-1:2.10-5.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-1:2.10-5.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-1:2.10-5.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-1:2.10-5.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-1:2.10-5.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debuginfo-1:2.10-5.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debuginfo-1:2.10-5.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debuginfo-1:2.10-5.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debuginfo-1:2.10-5.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debugsource-1:2.10-5.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debugsource-1:2.10-5.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debugsource-1:2.10-5.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Behobenwpa_supplicant-debugsource-1:2.10-5.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2024:2517
Workaroundwpa_supplicant-1:2.10-5.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-1:2.10-5.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-1:2.10-5.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-1:2.10-5.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-1:2.10-5.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debuginfo-1:2.10-5.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debuginfo-1:2.10-5.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debuginfo-1:2.10-5.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debuginfo-1:2.10-5.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debugsource-1:2.10-5.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debugsource-1:2.10-5.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debugsource-1:2.10-5.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Workaroundwpa_supplicant-debugsource-1:2.10-5.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NsecondaryAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.2mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:Psecondary · CVSS-BT (t0sche)

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: poc · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-287USprimärCWE-285USCWE-285US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

Helica-core/eap_pwnpoc of CVE-2023-52160PoC · poc_in_github

betroffene Produkte (45)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Broadcom Brocade SANnav <2.3.0aalle Versionencert_bundDE
Broadcom Fabric OS <9.2.0calle Versionencert_bundDE
Broadcom Fabric OS <9.2.1a1alle Versionencert_bundDE
Broadcom Fabric OS <9.2.2alle Versionencert_bundDE
Debian Linuxalle Versionencert_bundDEcpe:/o:debian:debian_linux:-
Fedora Linuxalle Versionencert_bundDEcpe:/o:fedoraproject:fedora:-
HPE Switchalle Versionencert_bundDEcpe:/h:hp:switch:-
Open Source wpa_supplicantalle Versionencert_bundDEcpe:/a:open_source:wpa_supplicant:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
Broadcom Brocade SANnav< 2.3.0acert_bundDE
Broadcom Fabric OS< 9.2.0ccert_bundDE
Broadcom Fabric OS< 9.2.1a1cert_bundDE
Broadcom Fabric OS< 9.2.2cert_bundDE
n/a n/a≤ n/aenisa_euvdEU
Jouni Malinen WPA Supplicant≤ 2.10fstec_bduRU
АО «ИВК» АЛЬТ СП 10alle Versionenfstec_bduRU
АО «НППКТ» ОСОН ОСнова Оnyx≤ 2.14fstec_bduRU
АО «НТЦ ИТ РОСА» РОСА ХРОМ≤ 12.4fstec_bduRU

20 von 45 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2024:2517Red Hat Security Advisory: wpa_supplicant security update2024-04-30csaf · redhat_csafUS
An update for wpa_supplicant is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2024-0415wpa_supplicant: Schwachstelle ermöglicht Umgehung von SicherheitsmaßnahmenDeutsch2024-02-18csaf · cert_bundDE
Ein anonymer Angreifer im angrenzenden Netzbereich kann eine Schwachstelle in wpa_supplicant ausnutzen, um die Sicherheitsmaßnahmen zu umgehen.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund redhat_csaf NVD CVE.org MITRE

veröffentlicht 2024-02-22geändert 2026-06-17

verwandt (7,714)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-105133US	high7.3OT kritisch	79.5% (100th)	KEV	2026-10-04
A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component…
CVE-2026-82329US	—OT kritisch	14.4% (97th)	KEV	2026-08-28
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileg…
CVE-2026-42018US	—OT kritisch	9.80% (96th)	KEV	2026-08-12
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
CVE-2026-65400US	—OT kritisch	1.72% (77th)	KEV	2026-08-06
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, ma…
CVE-2026-16232US	critical9.8OT kritisch	3.52% (89th)	KEV	2026-07-22
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to au…

+7709 weitere

Referenzen (22)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan