Lucene search

K
cve[email protected]CVE-2002-0214
HistoryMay 16, 2002 - 4:00 a.m.

CVE-2002-0214

2002-05-1604:00:00
web.nvd.nist.gov
26
compaq
intel pro/wireless
driver
wep key
weak permission
security vulnerability
cve-2002-0214
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key.

Affected configurations

NVD
Node
intelintel_pro_wireless_2011b_lan_usb_device_driverMatch1.5.16.0
OR
intelintel_pro_wireless_2011b_lan_usb_device_driverMatch1.5.18.0

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2002-0214