w1.fi wpa supplicant

Name: w1.fi wpa supplicant
Brand: w1.fi

productUS

cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical8high28medium1low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-23303US	critical9.8	3.05% (88th)	Exploit	2.10	2022-01-17	< 2.10
CVE-2023-52160US	medium6.5	1.18% (67th)	Exploit	no fix	2024-02-22	≤ 2.10
CVE-2015-1863US	medium5.8	5.19% (92nd)	—	no fix	2015-04-28	7 versions
CVE-2019-9497US	high8.1	4.99% (92nd)	—	no fix	2019-04-17	2 versions
CVE-2014-3686US	medium6.8	4.95% (92nd)	—	no fix	2014-10-16	6 versions
CVE-2019-9496US	high7.5	4.67% (92nd)	—	no fix	2019-04-17	≤ 2.7
CVE-2017-13082US	high8.1OT elevated	4.58% (92nd)	—	no fix	2017-10-17	33 versions
CVE-2015-4142US	medium4.3	4.00% (90th)	—	no fix	2015-06-15	11 versions
CVE-2019-9494US	medium5.9	3.88% (90th)	—	no fix	2019-04-17	≤ 2.7
CVE-2015-4143US	medium5.0	3.50% (89th)	—	no fix	2015-06-15	7 versions
CVE-2015-4146US	medium5.0	3.48% (89th)	—	no fix	2015-06-15	7 versions
CVE-2019-9495US	low3.7OT elevated	3.48% (89th)	—	no fix	2019-04-17	≤ 2.7
CVE-2015-8041US	medium5.0	3.41% (89th)	—	no fix	2015-11-09	≤ 2.4
CVE-2015-4145US	medium5.0	3.41% (89th)	—	no fix	2015-06-15	7 versions
CVE-2015-4144US	medium5.0	3.41% (89th)	—	no fix	2015-06-15	7 versions
CVE-2019-11555US	medium5.9	3.25% (88th)	—	2.8	2019-04-26	< 2.8
CVE-2015-5316US	medium5.9	3.19% (88th)	—	2.6	2018-02-21	2.0 → 2.6
CVE-2015-4141US	medium4.3	2.99% (87th)	—	no fix	2015-06-15	11 versions
CVE-2016-4476US	high7.5	2.86% (87th)	—	no fix	2016-05-09	0.6.7 → 2.5
CVE-2015-5315US	medium5.9	2.52% (85th)	—	2.6	2018-02-21	2.0 → 2.6
CVE-2017-13077US	medium6.8OT elevated	2.39% (84th)	—	no fix	2017-10-17	33 versions
CVE-2017-13080US	medium5.3OT elevated	2.28% (83rd)	—	no fix	2017-10-17	33 versions
CVE-2015-5314US	medium5.9	2.27% (83rd)	—	2.6	2018-02-21	2.0 → 2.6
CVE-2019-9499US	high8.1	2.21% (83rd)	—	no fix	2019-04-17	2 versions
CVE-2019-9498US	high8.1	2.21% (83rd)	—	no fix	2019-04-17	2 versions
CVE-2017-13084US	medium6.8OT elevated	2.21% (82nd)	—	no fix	2017-10-17	33 versions
CVE-2017-13079US	medium5.3OT elevated	2.12% (82nd)	—	no fix	2017-10-17	33 versions
CVE-2017-13078US	medium5.3OT elevated	2.07% (81st)	—	no fix	2017-10-17	33 versions
CVE-2017-13086US	medium6.8OT elevated	2.05% (81st)	—	no fix	2017-10-17	33 versions
CVE-2017-13081US	medium5.3OT elevated	1.98% (80th)	—	no fix	2017-10-17	33 versions
CVE-2022-23304US	critical9.8	1.91% (80th)	—	2.10	2022-01-17	< 2.10
CVE-2017-13088US	medium5.3OT elevated	1.81% (78th)	—	no fix	2017-10-17	33 versions
CVE-2017-13087US	medium5.3OT elevated	1.74% (78th)	—	no fix	2017-10-17	33 versions
CVE-2021-30004US	medium5.3	1.64% (76th)	—	no fix	2021-04-02	= 2.9
CVE-2018-14526US	medium6.5	1.48% (74th)	—	no fix	2018-08-08	2.0 → 2.6
CVE-2021-27803US	high7.5	1.23% (69th)	—	2.10	2021-02-26	1.0 → 2.10
CVE-2019-16275US	medium6.5	1.21% (68th)	—	no fix	2019-09-12	≤ 2.9
CVE-2015-0210US	medium5.9	0.90% (60th)	—	no fix	2017-08-28	= 2.0-16
CVE-2024-5290US	high7.8	0.65% (51st)	—	no fix	2024-08-07	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-320CWE-32010 CVEs
CWE-322Key Exchange without Entity Authentication10 CVEs
CWE-323Reusing a Nonce, Key Pair in Encryption10 CVEs
CWE-330Use of Insufficiently Random Values10 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
CWE-287Improper Authentication5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-203Observable Discrepancy4 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan