Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2019-15126
HistoryFeb 05, 2020 - 5:15 p.m.

Information disclosure

2020-02-0517:15:00
PRIOn knowledge base
www.prio-n.com
6

3.1 Low

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

5.7 Medium

AI Score

Confidence

Low

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.3%

JSON

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503.

CPENameOperatorVersion
ipadoslt13.2
iphone_oslt13.2
mac_os_xlt10.15.1

Related

nessus 53
redhatcve 3
attackerkb 1
cve 6
cert 1
mscve 2
huawei 2
debiancve 2
redhat 9
f5 1
prion 4
ubuntucve 2
osv 5
fortinet 1
ics 1
openvas 44
thn 1
hp 1
suse 4
githubexploit 4
mageia 2
trendmicroblog 1
packetstorm 1
schneier 1
zdt 1
kaspersky 1
threatpost 1
exploitpack 1
kitploit 1
cisco 1
fedora 15
veracode 2
amazon 2
exploitdb 1
centos 1
oraclelinux 4
cloudfoundry 2
ubuntu 7
debian 5
avleonov 1
ibm 1
nessus
nessus
SUSE SLES12 Security Update : kernel-firmware (SUSE-SU-2021:4200-1)
2021-12-31 00:00:00
SUSE SLES12 Security Update : bcm43xx-firmware (SUSE-SU-2021:4003-1)
2021-12-14 00:00:00
openSUSE 15 Security Update : kernel-firmware (openSUSE-SU-2021:1648-1)
2021-12-31 00:00:00
redhatcve
redhatcve
CVE-2019-15126
2020-03-06 16:40:50
CVE-2019-9500
2020-04-05 17:08:20
CVE-2019-9503
2020-03-27 07:59:03
attackerkb
attackerkb
CVE-2019-15126 aka Kr00k
2020-02-05 00:00:00
cve
cve
CVE-2019-15126
2020-02-05 17:15:00
CVE-2019-9500
2020-01-16 21:15:00
CVE-2019-9502
2020-02-03 21:15:00
cert
cert
Broadcom WiFi chipset drivers contain multiple vulnerabilities
2019-04-17 00:00:00
mscve
mscve
Microsoft HoloLens Remote Code Execution Vulnerabilities
2019-06-11 07:00:00
MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device
2023-02-14 08:00:00
huawei
huawei
Security Advisory - Two Heap Buffer Overflow Vulnerabilities in Broadcom WiFi Chipset Drivers
2019-10-30 00:00:00
Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chips
2020-05-27 00:00:00
debiancve
debiancve
CVE-2019-9500
2020-01-16 21:15:00
CVE-2019-9503
2020-01-16 21:15:00
redhat
redhat
(RHSA-2019:2945) Important: kpatch-patch security update
2019-10-01 07:28:36
(RHSA-2019:4171) Important: kpatch-patch security update
2019-12-10 10:20:12
(RHSA-2019:4168) Important: kernel security and bug fix update
2019-12-10 10:19:55
f5
f5
K50081147 : Linux kernel vulnerabilities CVE-2019-9500, CVE-2019-9503
2022-07-21 00:00:00
prion
prion
Heap overflow
2020-01-16 21:15:00
Heap overflow
2020-02-03 21:15:00
Heap overflow
2020-02-03 21:15:00
ubuntucve
ubuntucve
CVE-2019-9500
2019-04-12 00:00:00
CVE-2019-9503
2019-04-12 00:00:00
osv
osv
Broadcom vulnerabilities (VU 166939) -- issue #1
2020-07-01 00:00:00
Broadcom vulnerabilities (VU 166939) -- issue #2
2020-07-01 00:00:00
linux-4.9 - security update
2019-06-17 00:00:00
fortinet
fortinet
Kr00k vulnerability (CVE-2019-15126) in Broadcom and Cypress Wi-Fi chips
2020-12-01 00:00:00
ics
ics
Siemens SIMATIC, SIMOTICS (Update A)
2020-12-08 12:00:00
openvas
openvas
Huawei Data Communication: Information Disclosure Vulnerability (huawei-sa-20200527-01-wifi-en, Kr00k)
2023-02-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:4201-1)
2022-01-01 00:00:00
openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2021:1648-1)
2022-02-01 00:00:00
thn
thn
New Wi-Fi Encryption Vulnerability Affects Over A Billion Devices
2020-02-26 18:15:00
hp
hp
HPSBPI03687 rev. 3 - Certain HP LaserJet Printer and MFP Products and JetDirect Print Server Products - Information Disclosure
2020-09-15 00:00:00
suse
suse
Security update for kernel-firmware (low)
2021-12-31 00:00:00
Security update for the Linux Kernel (important)
2019-05-16 00:00:00
Security update for the Linux Kernel (important)
2019-05-31 00:00:00
githubexploit
githubexploit
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados
2020-03-18 16:25:28
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados
2020-03-09 11:15:08
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Broadcom Bcm4389 Firmware
2020-04-05 17:46:41
mageia
mageia
Updated nonfree firmware packages fix security vulnerability
2021-03-04 15:26:19
Updated nonfree firmware packages fix security vulnerability
2021-03-04 15:26:19
trendmicroblog
trendmicroblog
This Week in Security News: Trend Micro Detects a 10 Percent Rise in Ransomware in 2019 and New Wi-Fi Encryption Vulnerability Affects Over a Billion Devices
2020-02-28 13:56:27
packetstorm
packetstorm
Broadcom Wi-Fi KR00K Proof Of Concept
2020-03-19 00:00:00
schneier
schneier
Wi-Fi Chip Vulnerability
2020-03-03 12:43:15
zdt
zdt
Broadcom Wi-Fi Devices - (KR00K) Information Disclosure Exploit
2020-03-19 00:00:00
kaspersky
kaspersky
KLA20228 OSI vulnerability in Microsoft Device
2023-02-14 00:00:00
threatpost
threatpost
Billions of Devices Open to Wi-Fi Eavesdropping Attacks
2020-02-27 04:07:18
exploitpack
exploitpack
Broadcom Wi-Fi Devices - KR00K Information Disclosure
2020-03-18 00:00:00
kitploit
kitploit
R00Kie-Kr00Kie - PoC Exploit For The CVE-2019-15126 Kr00K Vulnerability
2020-03-30 20:30:00
cisco
cisco
Wi-Fi Protected Network and Wi-Fi Protected Network 2 Information Disclosure Vulnerability
2020-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: kernel-tools-5.0.9-200.fc29
2019-04-25 01:37:09
[SECURITY] Fedora 28 Update: kernel-headers-5.0.9-100.fc28
2019-04-25 23:25:02
[SECURITY] Fedora 30 Update: kernel-tools-5.0.9-300.fc30
2019-04-25 19:34:50
veracode
veracode
Buffer Overflows
2019-09-04 00:09:42
Denial Of Service (DoS)
2020-06-13 03:28:21
amazon
amazon
Important: kernel
2019-05-29 19:35:00
Important: kernel
2019-05-29 18:59:00
exploitdb
exploitdb
Broadcom Wi-Fi Devices - 'KR00K Information Disclosure
2020-03-18 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2019-09-18 20:39:01
oraclelinux
oraclelinux
kernel security and bug fix update
2019-09-04 00:00:00
Unbreakable Enterprise kernel security update
2020-05-07 00:00:00
kernel security and bug fix update
2019-09-12 00:00:00
cloudfoundry
cloudfoundry
USN-3981-2: Linux kernel (HWE) vulnerabilities (AKA ZombieLoad Attack) | Cloud Foundry
2019-05-20 00:00:00
USN-4095-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry
2019-08-29 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2019-05-14 00:00:00
Linux kernel (HWE) vulnerabilities
2019-05-15 00:00:00
Linux kernel (HWE) vulnerabilities
2019-05-14 00:00:00
debian
debian
[SECURITY] [DLA 1824-1] linux-4.9 security update
2019-06-18 10:23:55
[SECURITY] [DSA 4465-1] linux security update
2019-06-17 18:00:31
[SECURITY] [DSA 4465-1] linux security update
2019-06-17 18:00:31
avleonov
avleonov
Microsoft Patch Tuesday February 2023: Win Graphics RCE, Edge RCE, Publisher SFB, CLFS EoP, Exchange RCEs, Word RCE, HoloLens1
2023-02-26 16:37:52
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za
2019-07-25 15:25:01

3.1 Low

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

5.7 Medium

AI Score

Confidence

Low

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

0.007 Low

EPSS

Percentile

79.3%

JSON
Related for PRION:CVE-2019-15126
nessus53redhatcve3attackerkb1cve6cert1mscve2huawei2debiancve2redhat9f51prion4ubuntucve2osv5fortinet1ics1openvas44thn1hp1suse4githubexploit4mageia2trendmicroblog1packetstorm1schneier1zdt1kaspersky1threatpost1exploitpack1kitploit1cisco1fedora15veracode2amazon2exploitdb1centos1oraclelinux4cloudfoundry2ubuntu7debian5avleonov1ibm1