1 matches found
freeradius: eap-pwd: Information leak due to aborting when needing more than 10 iterations
An information leak was discovered in the implementation of EAP-pwd in freeradius. An attacker could initiate several EAP-pwd handshakes to leak information, which can then be used to recover the user's WiFi password by performing dictionary and brute-force attacks...
6.5CVSS5.8AI score0.01632EPSS
SaveExploits1References4
20