CVE-2022-23303

mediumpriority · attend · 50EPSS 0.031 · 88 %ileexploit · PoCDEEUNLRUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

3.05% (88th) EPSS

CVSS 6.8 · medium

Is it mine?

205 products

Check your exposure

Who says so?

8 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedwpa_supplicant-1:2.10-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-1:2.10-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-1:2.10-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-1:2.10-2.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-1:2.10-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debuginfo-1:2.10-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debuginfo-1:2.10-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debuginfo-1:2.10-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debuginfo-1:2.10-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debugsource-1:2.10-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debugsource-1:2.10-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debugsource-1:2.10-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
Fixedwpa_supplicant-debugsource-1:2.10-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHBA-2022:3991
FixedSIDIS Secured SmartPlugsiemens_psirt
Update to V7.26.0310 or later version
FixedSIDIS Secured SmartPlugcisa_csaf_ot
Update to V7.26.0310 or later version

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.8–9.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.19.3criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-203USprimaryCWE-203USCWE-203USCWE-924USCWE-924USCWE-924US

exploits (1)

Public proof-of-concept and weaponised exploit code.

web-logs2/hostapd_mirrormirror of https://w1.fi/cgit/hostap/ till 30/01/2023 for CVE-2022-23303/4 - c22PoC · poc_in_github

affected products (205)

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Gentoo Linuxall versionscert_bundDEcpe:/o:gentoo:linux:-
Open Source wpa_supplicantall versionscert_bundDEcpe:/a:open_source:wpa_supplicant:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
SIDIS Secured SmartPlug < V7.26.0310all versionscisa_csaf_otUS
Siemens SIDIS Secured SmartPlug≤ vers:intdot/<7.26.0310cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
Fedora Project Fedora≤ 35fstec_bduRU
Jouni Malinen WPA Supplicant1.0 → 2.10fstec_bduRU
Jouni Malinen hostapd≤ 2.10fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.3fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.4fstec_bduRU
Novell Inc. openSUSE Leap Micro≤ 5.2fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 9fstec_bduRU
АО «ИВК» Альт 8 СПall versionsfstec_bduRU
АО «НТЦ ИТ РОСА» ROSA Virtualization≤ 2.1fstec_bduRU
АО «НТЦ ИТ РОСА» РОСА ХРОМ≤ 12.4fstec_bduRU
ООО "Открытая мобильная платформа" ОС Аврора≤ 4.0.2.209fstec_bduRU

showing 20 of 205

advisories (5)

Vendor and ecosystem advisories describing this.

NCSC-2026-0229Kwetsbaarheden verholpen in Siemens productenNL2026-07-14csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als CADRA, IAM, Mendix, OpCenter, RUGGEDCOM, SIDIS en SIMATIC.
RHBA-2022:3991Red Hat Bug Fix Advisory: new packages: wpa_supplicant2022-05-17csaf · redhat_csafUS
New wpa_supplicant packages are available for Red Hat Enterprise Linux 9.
SSA-585531SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.03102026-07-14csaf · siemens_psirtDE
SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.
WID-SEC-W-2023-2521wpa_supplicant: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2022-01-27csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in wpa_supplicant ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
ICSA-26-202-04Siemens SIDIS Secured SmartPlug2026-07-14icsa · cisa_csaf_otUS
SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl redhat_csaf siemens_psirt NVD CVE.org MITRE

published 2022-01-17modified 2026-07-14

related (886)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2024-39891US	medium5.3OT critical	1.67% (77th)	KEV	2024-07-02
In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited…
CVE-2017-5753US	medium5.6	93.8% (100th)	Exploit	2018-01-04
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side…
CVE-2023-28770US	high7.5	57.8% (99th)	Exploit	2023-04-27
The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote un…
CVE-2021-4191US	medium5.3	80.0% (100th)	Exploit	2022-03-28
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnera…
CVE-2017-5715US	medium5.6	73.2% (99th)	Exploit	2018-01-04
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access v…

+881 more

references (16)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan