Jouni Malinen WPA Supplicant

Name: Jouni Malinen WPA Supplicant
Brand: Jouni Malinen

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical7high18medium1low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-23303US	critical9.8	3.05% (88th)	Exploit	no fix	2022-01-17	1.0 → 2.10
CVE-2023-52160US	medium6.5	1.18% (67th)	Exploit	no fix	2024-02-22	≤ 2.10
CVE-2019-9497US	high8.1	4.99% (92nd)	—	no fix	2019-04-17	2 versions
CVE-2017-13082US	high8.1OT elevated	4.58% (92nd)	—	no fix	2017-10-17	≤ 2.7
CVE-2015-4142US	medium4.3	4.00% (91st)	—	no fix	2015-06-15	4 versions
CVE-2019-10064US	high7.5	3.84% (90th)	—	no fix	2020-02-28	≤ 2.6
CVE-2015-4143US	medium5.0	3.50% (89th)	—	no fix	2015-06-15	3 versions
CVE-2019-9495US	low3.7OT elevated	3.48% (89th)	—	no fix	2019-04-17	≤ 2.7
CVE-2015-8041US	medium5.0	3.41% (89th)	—	no fix	2015-11-09	≤ 2.4
CVE-2015-4144US	medium5.0	3.41% (89th)	—	no fix	2015-06-15	3 versions
CVE-2019-11555US	medium5.9	3.25% (88th)	—	no fix	2019-04-26	≤ 2.8
CVE-2015-4141US	medium4.3	2.99% (87th)	—	no fix	2015-06-15	4 versions
CVE-2017-13077US	medium6.8OT elevated	2.39% (84th)	—	no fix	2017-10-17	≤ 2.7
CVE-2017-13080US	medium5.3OT elevated	2.28% (83rd)	—	no fix	2017-10-17	≤ 2.7
CVE-2019-9499US	high8.1	2.21% (83rd)	—	no fix	2019-04-17	2 versions
CVE-2019-9498US	high8.1	2.21% (83rd)	—	no fix	2019-04-17	2 versions
CVE-2017-13084US	medium6.8OT elevated	2.21% (82nd)	—	no fix	2017-10-17	≤ 2.7
CVE-2017-13079US	medium5.3OT elevated	2.12% (82nd)	—	no fix	2017-10-17	≤ 2.7
CVE-2017-13078US	medium5.3OT elevated	2.07% (81st)	—	no fix	2017-10-17	≤ 2.7
CVE-2017-13086US	medium6.8OT elevated	2.05% (81st)	—	no fix	2017-10-17	≤ 2.7
CVE-2017-13081US	medium5.3OT elevated	1.98% (80th)	—	no fix	2017-10-17	≤ 2.7
CVE-2022-23304US	critical9.8	1.91% (80th)	—	no fix	2022-01-17	1.0 → 2.10
CVE-2017-13087US	medium5.3OT elevated	1.74% (78th)	—	no fix	2017-10-17	≤ 2.7
CVE-2018-14526US	medium6.5	1.48% (74th)	—	no fix	2018-08-08	2.0 → 2.6
CVE-2021-27803US	high7.5	1.23% (69th)	—	no fix	2021-02-26	1.0 → 2.10
CVE-2019-16275US	medium6.5	1.21% (68th)	—	no fix	2019-09-12	≤ 2.10
CVE-2019-5061US	medium6.5	0.92% (60th)	—	no fix	2019-12-12	≤ 2.6
CVE-2024-5290US	high7.8	0.65% (51st)	—	no fix	2024-08-07	≤ 2.10
CVE-2022-37660US	—OT elevated	0.38% (32nd)	—	no fix	2025-02-11	≤ 2.10

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-323Reusing a Nonce, Key Pair in Encryption10 CVEs
CWE-320CWE-3209 CVEs
CWE-322Key Exchange without Entity Authentication9 CVEs
CWE-330Use of Insufficiently Random Values9 CVEs
CWE-287Improper Authentication5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-203Observable Discrepancy3 CVEs
CWE-284Improper Access Control3 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan