CVE-2017-13077

mediumpriority · track · 28OT risk · elevatedEPSS 0.024 · 84 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.39% (84th) EPSS
CVSS 5.4 · medium
Is it mine?
454 products
Check your exposure
Who says so?
9 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedwpa_supplicant-debuginfo-1:0.7.3-9.el6_9.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2911
  • Fixedphoenix_contact_psirt

    PHOENIX CONTACT is actively working on these vulnerabilities. CERT@VDE will update this advisory as soon as further significant details are provided by the vendor, especially with information about patches provided. For PHOENIX CONTACT devices running Microsoft Windows, we recommend to apply the security update provided by Microsoft external link. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. This advisory will be updated as further details become available. For the following products a firmware update addressing the issues is available for download on the Download tab of the corresponding product page on our website: Products: FL EPA 2, FL EPA 2 RSMA Fixed Firmware: 1.53 or higher Released: 06/2018 Products: FL WLAN 5100, FL WLAN 5101, FL WLAN 5102, FL WLAN 5110, FL WLAN 5111 Fixed Firmware: FW 3.06 or higher Released: 06/2018 Products: FL WLAN 1100, FL WLAN 1101, FL WLAN 2100, FL WLAN 2101 Fixed Firmware: FW 2.21 or higher Released: 06/2018

  • Fixedpepperl_fuchs_psirt

    ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

  • Fixedendress_hauser_psirt

    For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

  • Fixedendress_hauser_psirt

    Endress+Hauser provides updated firmware versions for all related products from the Proline portfolio which fixes the vulnerability and recommends customers to update to the new fixed version. For support, please contact your local service center.

  • FixedCK70A-ATEXcisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedCK71A-ATEXcisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedCN70A-ATEXcisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedCN70E-ATEXcisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedEx-Handy 09cisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedEx-Handy 209cisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedPad-Ex 01cisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedSmart-Ex 01cisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedSmart-Ex 201cisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedTab-Ex 01cisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • Fixedi.roc Ci70-Excisa_csaf_ot

    Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.

  • FixedBD Pyxis Anesthesia EScisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis Anesthesia System 3500cisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis Anesthesia System 4000cisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis CIISafe - Workstationcisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis MedStation 4000 T2cisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis MedStation EScisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis PARxcisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis ParAssist Systemcisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis Parx handheldcisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis StockStation Systemcisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis SupplyRollercisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedBD Pyxis SupplyStationcisa_csaf_ot

    Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:

  • FixedInTouch ICU Bed (enabled with Bed Wireless)cisa_csaf_ot

    For additional questions, users can call 1-800-STRYKER, option 2 for Stryker Medical Technical Support.

  • FixedS3 MedSurg Bed (enabled with iBed Wireless)cisa_csaf_ot

    For additional questions, users can call 1-800-STRYKER, option 2 for Stryker Medical Technical Support.

  • FixedSecure II MedSurg Bed (enabled with iBed Wireless)cisa_csaf_ot

    For additional questions, users can call 1-800-STRYKER, option 2 for Stryker Medical Technical Support.

  • Mitigationendress_hauser_psirt

    If an immediate firmware update is not possible, the WLAN on the unit can also be switched off as a precautionary measure.

  • MitigationRUGGEDCOM RS9xxWcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationRUGGEDCOM RX1400 with WLAN interfacecisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE W-700 (IEEE 802.11a/b/g)cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE W-700 (IEEE 802.11n)cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE W1750Dcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE WLC711cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE WLC712cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC ET200 PRO IM154-6 PN IWLANcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC IWLAN-PB/LINKcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC Mobile Panel 277(F) IWLANcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC RF350Mcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC RF650Mcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSINAMICS v20 Smart Access Modulecisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationTropOS Mesh OScisa_csaf_ot

    ABB has released Mesh OS version 8.5.3 to address these vulnerabilities.

  • MitigationBL2 BPCcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationBL2 PPCcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL COMSERVER WLAN 232/422/485cisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN 110xcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN 210xcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN 230 AP 802-11cisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN 24 AP 802-11cisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN 24 DAP 802-11cisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN 24 EC 802-11cisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN 510xcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN EPAcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationFL WLAN SPAcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationITC 8113cisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationRAD-80211-XDcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationRAD-WHG/WLAN-XDcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationTPC 6013cisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationVMT 30xxcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationVMT 50xxcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationVMT 70xxcisa_csaf_ot

    If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.

  • MitigationCK70A-ATEXcisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationCK71A-ATEXcisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationCN70A-ATEXcisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationCN70E-ATEXcisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationEx-Handy 09cisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationEx-Handy 209cisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationPad-Ex 01cisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationSmart-Ex 01cisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationSmart-Ex 201cisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • MitigationTab-Ex 01cisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

  • Mitigationi.roc Ci70-Excisa_csaf_ot

    Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.1
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.2–8.1

v2.05.4mediumAV:A/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 5.5 · impact 6.4
v3.06.8mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nprimary · NVD / NIST USexploitability 1.6 · impact 5.2
v3.06.8mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · Phoenix Contact PSIRT DE
v3.06.8mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · Pepperl+Fuchs PSIRT DE
v3.06.8mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · Endress+Hauser PSIRT DE
v3.06.2mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.08.1highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · Red Hat Product Security US
v3.04.2mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Nsecondary · CISA US
v3.17.9highAV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-330USprimaryCWE-284USCWE-320USCWE-322USCWE-323USCWE-323USCWE-326USCWE-330USCWE-330US
04

affected products (454)

Products and version ranges known to be affected.

showing 20 of 454
05

advisories (15)

Vendor and ecosystem advisories describing this.

  • RHSA-2017:2907Red Hat Security Advisory: wpa_supplicant security update2017-10-17csaf · redhat_csafUS

    An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2017:2911Red Hat Security Advisory: wpa_supplicant security update2017-10-18csaf · redhat_csafUS

    An update for wpa_supplicant is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • VDE-2017-003PHOENIX CONTACT: WLAN enabled devices utilising WPA2 encryption2017-11-09csaf · phoenix_contact_psirtDE

    Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. Update A / Revision 2 - 2017-11-09 * Added a detailed list of affected products Update B / Revision 3 - 2018-09-24 * Added firmware update information, see section "Solution"

  • VDE-2017-005Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption2017-12-11csaf · pepperl_fuchs_psirtDE

    Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. ecom instruments is a subsidiary company of PEPPERL+FUCHS.

  • VDE-2019-005Endress+Hauser: WIFI enabled products utilising WPA22019-03-19csaf · endress_hauser_psirtDE

    Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. The Field Xpert SFX370 and SFX350 handhelds are manufactured by Pepperl+Fuchs/ecom instruments for Endress+Hauser. The Advisory for Pepperl+Fuchs/ecom instruments can be found here: VDE-2017-005

  • VDE-2021-010Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks2021-05-18csaf · endress_hauser_psirtDE

    Endress+Hauser products utilizing WPA2 are vulnerable to KRACK attacks. Proline portfolio is a flow meter with an optional WLAN interface in the display. The flowmeters are only affected if the optional WLAN display is present.

  • WID-SEC-W-2025-0369IEEE WPA2: Mehrere SchwachstellenDeutsch2017-10-15csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IEEE WPA2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

  • WID-SEC-W-2025-0370Apple Mac OS: Mehrere SchwachstellenDeutsch2017-09-25csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.

  • WID-SEC-W-2026-4000Google Android: Mehrere SchwachstellenDeutsch2018-07-02csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android und Pixel/Nexus ausnutzen, um beliebigen Programmcode mit erhöhten Rechten auszuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen oder um einen Denial of Service Zustand herbeizuführen.

  • ICSA-17-318-01ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)2017-11-14icsa · cisa_csaf_otUS

    Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.

  • ICSA-17-318-02AABB TropOS (Update A)2017-11-14icsa · cisa_csaf_otUS

    Vendor: ABB

  • ICSA-17-325-01PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol2017-11-21icsa · cisa_csaf_otUS

    ATTENTION: Public exploits are available.

  • ICSA-17-353-02PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol2017-12-19icsa · cisa_csaf_otUS

    ATTENTION: Low skill level is needed to exploit. Public exploits are available.

  • ICSMA-18-114-01BD Pyxis2018-04-24icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.

  • ICSMA-19-029-01Stryker Medical Beds2019-01-29icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.

06

also known as (9)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otredhat_csafphoenix_contact_psirtpepperl_fuchs_psirtendress_hauser_psirtNVDCVE.orgMITRE
published 2017-10-17modified 2026-06-17
09

references (108)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan