w1.fi hostapd

Name: w1.fi hostapd
Brand: w1.fi

productUS

cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical10high25medium2low

updated 2026-10-28

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-12695US	high7.5OT high	15.2% (97th)	Exploit	2.0.0	2020-06-08	< 2.0.0
CVE-2022-23303US	critical9.8	3.05% (88th)	Exploit	2.10	2022-01-17	< 2.10
CVE-2019-9497US	high8.1	4.99% (92nd)	—	no fix	2019-04-17	2 versions
CVE-2014-3686US	medium6.8	4.95% (92nd)	—	no fix	2014-10-16	6 versions
CVE-2019-9496US	high7.5	4.67% (92nd)	—	no fix	2019-04-17	≤ 2.7
CVE-2017-13082US	high8.1OT elevated	4.58% (92nd)	—	no fix	2017-10-17	31 versions
CVE-2012-4445US	medium4.3	4.22% (91st)	—	no fix	2012-10-10	13 versions
CVE-2015-4142US	medium4.3	4.00% (90th)	—	no fix	2015-06-15	11 versions
CVE-2019-9494US	medium5.9	3.88% (90th)	—	no fix	2019-04-17	≤ 2.7
CVE-2019-10064US	high7.5	3.84% (90th)	—	2.6	2020-02-28	< 2.6
CVE-2015-4143US	medium5.0	3.50% (89th)	—	no fix	2015-06-15	7 versions
CVE-2015-4146US	medium5.0	3.48% (89th)	—	no fix	2015-06-15	7 versions
CVE-2019-9495US	low3.7OT elevated	3.48% (89th)	—	no fix	2019-04-17	≤ 2.7
CVE-2015-8041US	medium5.0	3.41% (89th)	—	no fix	2015-11-09	≤ 2.4
CVE-2015-4145US	medium5.0	3.41% (89th)	—	no fix	2015-06-15	7 versions
CVE-2015-4144US	medium5.0	3.41% (89th)	—	no fix	2015-06-15	7 versions
CVE-2019-11555US	medium5.9	3.25% (88th)	—	2.8	2019-04-26	< 2.8
CVE-2015-4141US	medium4.3	2.99% (87th)	—	no fix	2015-06-15	11 versions
CVE-2016-4476US	high7.5	2.86% (87th)	—	no fix	2016-05-09	0.6.7 → 2.5
CVE-2019-13377US	medium5.9	2.54% (85th)	—	no fix	2019-08-15	2.0 → 2.8
CVE-2017-13077US	medium6.8OT elevated	2.39% (84th)	—	no fix	2017-10-17	31 versions
CVE-2016-10743US	high7.5	2.35% (84th)	—	2.6	2019-03-23	< 2.6
CVE-2017-13080US	medium5.3OT elevated	2.28% (83rd)	—	no fix	2017-10-17	31 versions
CVE-2019-9499US	high8.1	2.21% (83rd)	—	no fix	2019-04-17	2 versions
CVE-2019-9498US	high8.1	2.21% (83rd)	—	no fix	2019-04-17	2 versions
CVE-2017-13084US	medium6.8OT elevated	2.21% (82nd)	—	no fix	2017-10-17	31 versions
CVE-2017-13079US	medium5.3OT elevated	2.12% (82nd)	—	no fix	2017-10-17	31 versions
CVE-2017-13078US	medium5.3OT elevated	2.07% (81st)	—	no fix	2017-10-17	31 versions
CVE-2017-13086US	medium6.8OT elevated	2.05% (81st)	—	no fix	2017-10-17	31 versions
CVE-2017-13081US	medium5.3OT elevated	1.98% (80th)	—	no fix	2017-10-17	31 versions
CVE-2022-23304US	critical9.8	1.91% (80th)	—	2.10	2022-01-17	< 2.10
CVE-2017-13088US	medium5.3OT elevated	1.81% (78th)	—	no fix	2017-10-17	31 versions
CVE-2017-13087US	medium5.3OT elevated	1.74% (78th)	—	no fix	2017-10-17	31 versions
CVE-2021-30004US	medium5.3	1.64% (76th)	—	no fix	2021-04-02	= 2.9
CVE-2019-16275US	medium6.5	1.21% (68th)	—	no fix	2019-09-12	≤ 2.9
CVE-2019-5061US	medium6.5	0.92% (60th)	—	no fix	2019-12-12	= 2.6
CVE-2025-24912US	—	0.78% (56th)	—	no fix	2025-03-12	≤ 2.11
CVE-2019-5062US	medium6.5	0.57% (47th)	—	no fix	2019-12-12	= 2.6
CVE-2022-37660US	—OT elevated	0.38% (32nd)	—	no fix	2025-02-11	≤ 2.10
CVE-2012-2389US	low2.1	0.35% (29th)	—	no fix	2012-06-21	= 0.7.3
CVE-2026-58374US	high7.1	0.29% (22nd)	—	no fix	2026-06-30	≤ 2.11

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-323Reusing a Nonce, Key Pair in Encryption11 CVEs
CWE-320CWE-32010 CVEs
CWE-322Key Exchange without Entity Authentication10 CVEs
CWE-330Use of Insufficiently Random Values10 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-203Observable Discrepancy5 CVEs
CWE-287Improper Authentication5 CVEs
CWE-20Improper Input Validation4 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE41 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan