The vulnerability of the wpa_supplicant component of the EAP-PWD protocol in wireless communication devices certified by WPA allows attackers to compromise the integrity and confidentiality of data, as well as cause service failures. This vulnerability is related to incorrect authentication procedures.

🗓️ 06 Jun 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The wpa_supplicant EAP-PWD flaw in WiFi Protected Access devices allows authentication failure without a password, risking data integrity, confidentiality, and service disruption.

Reporter	Title	Published	Views	Family All 93
Tenable Nessus	Amazon Linux 2 : freeradius (ALAS-2019-1218)	31 May 201900:00	–	nessus
Tenable Nessus	Debian DLA-1867-1 : wpa security update	12 Aug 201900:00	–	nessus
Tenable Nessus	Debian DSA-4430-1 : wpa - security update	15 Apr 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : wpa_supplicant (EulerOS-SA-2020-1036)	2 Jan 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.5.0 : wpa_supplicant (EulerOS-SA-2020-1073)	13 Jan 202000:00	–	nessus
Tenable Nessus	Fedora 30 : 1:wpa_supplicant (2019-ca49dfd42f)	2 May 201900:00	–	nessus
Tenable Nessus	Fedora 28 : hostapd (2019-d03bae77f5)	24 Apr 201900:00	–	nessus
Tenable Nessus	Fedora 30 : hostapd (2019-eba1109acd)	2 May 201900:00	–	nessus
Tenable Nessus	Fedora 29 : hostapd (2019-f409af9fbe)	24 Apr 201900:00	–	nessus
Tenable Nessus	FreeBSD : FreeBSD -- EAP-pwd missing commit validation (2da3cb25-6571-11e9-8e67-206a8a720317)	23 Apr 201900:00	–	nessus

Vulners

Node

jouni_malinen wpa_supplicantRange≤2.4

jouni_malinen hostapdRange≤2.4

jouni_malinen wpa_supplicantRange2.5–2.7

jouni_malinen hostapdRange2.5–2.7

fedora fedoraMatch28

canonical ubuntuMatch18.10

fedora fedoraMatch29

novell opensuse_leapMatch15.1

fedora fedoraMatch30

Source	Link
usn	www.usn.ubuntu.com/3944-1/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
packetstormsecurity	www.packetstormsecurity.com/files/152914/FreeBSD-Security-Advisory-FreeBSD-SA-19-03.wpa.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/
w1	www.w1.fi/security/2019-4/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-9497
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-9497
wiki	www.wiki.astralinux.ru/pages/viewpage.action

01 Dec 2021 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 26.8

CVSS 38.1

EPSS0.05372