CVE-2017-13082

mediumpriority · track · 34OT risk · elevatedEPSS 0.046 · 92 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
4.58% (92nd) EPSS
CVSS 5.8 · medium
Is it mine?
291 products
Check your exposure
Who says so?
8 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-26

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedwpa_supplicant-debuginfo-1:2.6-5.el7_4.1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2017:2907
  • Fixedpepperl_fuchs_psirt

    ### Android **Affected Products:** Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 Pepperl+Fuchs has released firmware updates for the following products: | Product | Date | Update Source | |---------------|-----------------------|----------------| | Smart-Ex 01 | Available since 09/2018 | FOTA-Update | | Smart-Ex 201 | Available since 10/2018 | FOTA-Update | --- ### Windows **Affected Products:** Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For *ecom instruments* devices running Windows, we recommend to apply the security update provided by Microsoft. If you are using **WPA-TKIP** in your WLAN, you should switch to **AES-CCMP** immediately. > **Note:** > This advisory will be updated as further details and/or software updates become available.

  • Fixedendress_hauser_psirt

    For Field Xpert handheld devices (SFX350/SFX370) running Windows Mobile, Endress+Hauser recommends to apply the security updates provided by Microsoft. Intermec/Honeywell as producer of the basis of the handheld provide the following security patch for the Windows Mobile operating system: SR18012500_802T_Cx70_WM65_ALL.CAB To obtain this patch, please contact your local Endress+Hauser representative. If you are using WPA-TKIP in your WLAN, you should switch to AES-CCMP immediately. For Field Xpert tablet PC for device configuration (SMT70) running Windows 10 Pro 1703 64 EN, Endress+Hauser strongly recommends updating to the newest available Windows version. As a general security measure Endress+Hauser strongly recommends to protect network access to the WIFI network with appropriate mechanisms. It is advised to configure the environment in order to run the devices in a protected IT environment. Note: This advisory will be updated as further details and/or software updates become available.

  • FixedStratix 5100cisa_csaf_ot

    After further investigation, Rockwell Automation has determined that since the vulnerability affects Stratix 5100 access points with 802.11r enabled and 802.11r is not fully supported on the Stratix 5100 WAP/WGB, access-point users are not affected by this vulnerability and patching the Stratix 5100 WAP/WGB is not required when the device is operating as an access point. To verify that 802.11r is disabled, please refer to this Knowledgebase Article ID 1068007. Rockwell still suggests that users refer to manufacturers of their connected wireless client devices for suggested patch procedures.

  • MitigationStratix 5100cisa_csaf_ot

    As new versions of firmware are released to remediate this vulnerability, Rockwell Automation will provide mitigation updates in their advisory. For more information about this vulnerability, mitigation updates, and Rockwell Automation's general security guidelines, please see Rockwell Automation's security advisory found at the following link. A login is required to view the advisory.https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1066697 Rockwell Automation also offers the following general security guidelines:

  • MitigationRUGGEDCOM RS9xxWcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationRUGGEDCOM RX1400 with WLAN interfacecisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE W-700 (IEEE 802.11a/b/g)cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE W-700 (IEEE 802.11n)cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE W1750Dcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE WLC711cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSCALANCE WLC712cisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC ET200 PRO IM154-6 PN IWLANcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC IWLAN-PB/LINKcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC Mobile Panel 277(F) IWLANcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC RF350Mcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSIMATIC RF650Mcisa_csaf_ot

    Contact the RUGGEDCOM support team at:

  • MitigationSINAMICS v20 Smart Access Modulecisa_csaf_ot

    Contact the RUGGEDCOM support team at:

02

cvss

Technical severity, 0–10. One row per scoring source.

8.1
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.8–8.1

v2.05.8mediumAV:A/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 6.5 · impact 6.4
v3.08.1highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 5.2
v3.08.1highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · Pepperl+Fuchs PSIRT DE
v3.08.1highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · Endress+Hauser PSIRT DE
v3.07.4highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.08.1highCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · Red Hat Product Security US
v3.06.8mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · CISA US
v3.17.9highAV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-330USprimaryCWE-320USCWE-322USCWE-323USCWE-323USCWE-323USCWE-330USCWE-330US
04

affected products (291)

Products and version ranges known to be affected.

showing 20 of 291
05

advisories (6)

Vendor and ecosystem advisories describing this.

  • RHSA-2017:2907Red Hat Security Advisory: wpa_supplicant security update2017-10-17csaf · redhat_csafUS

    An update for wpa_supplicant is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • VDE-2017-005Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption2017-12-11csaf · pepperl_fuchs_psirtDE

    Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. ecom instruments is a subsidiary company of PEPPERL+FUCHS.

  • VDE-2019-005Endress+Hauser: WIFI enabled products utilising WPA22019-03-19csaf · endress_hauser_psirtDE

    Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection. The Field Xpert SFX370 and SFX350 handhelds are manufactured by Pepperl+Fuchs/ecom instruments for Endress+Hauser. The Advisory for Pepperl+Fuchs/ecom instruments can be found here: VDE-2017-005

  • WID-SEC-W-2025-0369IEEE WPA2: Mehrere SchwachstellenDeutsch2017-10-15csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IEEE WPA2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

  • ICSA-17-299-02Rockwell Automation Stratix 5100 (Update A)2017-10-26icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability may allow the attacker to operate as a man-in-the-middle between the device and the wireless network.

  • ICSA-17-318-01ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)2017-11-14icsa · cisa_csaf_otUS

    Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.

06

also known as (9)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducert_bundredhat_csafpepperl_fuchs_psirtendress_hauser_psirtcisa_csaf_otNVDCVE.orgMITRE
published 2017-10-17modified 2026-06-17
09

references (80)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan