Lucene search
+L

71 matches found

OSV
OSV
added 2020/08/12 4:15 p.m.8 views

CVE-2020-17497

eapol.c in iNet wireless daemon IWD through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4...

8.1CVSS8AI score
Exploits0References1
Prion
Prion
added 2020/08/12 4:15 p.m.14 views

Code injection

eapol.c in iNet wireless daemon IWD through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4...

4.8CVSS7.9AI score0.00694EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/08/12 4:15 p.m.4 views

UBUNTU-CVE-2020-17497

eapol.c in iNet wireless daemon IWD through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4...

8.1CVSS5.8AI score0.00694EPSS
Exploits0References4
CVE
CVE
added 2020/08/12 3:15 p.m.51 views

CVE-2020-17497

CVE-2020-17497 affects the iNet wireless daemon (IWD) up to version 1.8. The vulnerability resides in eapol.c and allows an adjacent attacker to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4, potentially compromising the WPA3/RSN key handling. NVD reports a base score of 8.1 (HIGH) ...

8.1CVSS7.9AI score0.00694EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2020/08/12 3:15 p.m.19 views

CVE-2020-17497

eapol.c in iNet wireless daemon IWD through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4...

8.1CVSS8AI score0.00694EPSS
Exploits0
Cvelist
Cvelist
added 2020/08/12 3:15 p.m.19 views

CVE-2020-17497

eapol.c in iNet wireless daemon IWD through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4...

8AI score0.00694EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2018/01/15 12:0 a.m.50 views

Fedora 27 : 1:wpa_supplicant (2017-f45e844a85) (KRACK)

Fix the for the Key Reinstallation Attacks ========================================== - hostapd: Avoid key reinstallation in FT handshake CVE-2017-13082 - Fix PTK rekeying to generate a new ANonce - Prevent reinstallation of an already in-use group key and extend protection of GTK/IGTK...

8.1CVSS7.2AI score0.04575EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2017/10/18 12:0 a.m.51 views

Fedora 26 : 1:wpa_supplicant (2017-60bfb576b7) (KRACK)

Fix the for the Key Reinstallation Attacks ========================================== - hostapd: Avoid key reinstallation in FT handshake CVE-2017-13082 - Fix PTK rekeying to generate a new ANonce - Prevent reinstallation of an already in-use group key and extend protection of GTK/IGTK...

8.1CVSS7.2AI score0.04575EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2017/10/18 12:0 a.m.46 views

Fedora 25 : 1:wpa_supplicant (2017-12e76e8364) (KRACK)

Fix the for the Key Reinstallation Attacks ========================================== - hostapd: Avoid key reinstallation in FT handshake CVE-2017-13082 - Fix PTK rekeying to generate a new ANonce - Prevent reinstallation of an already in-use group key and extend protection of GTK/IGTK...

8.1CVSS7.2AI score0.04575EPSS
Exploits1References10
NVD
NVD
added 2017/10/17 1:29 p.m.36 views

CVE-2017-13082

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the fast BSS transmission FT handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

8.1CVSS7.7AI score0.04575EPSS
Exploits1References26
OSV
OSV
added 2017/10/17 1:29 p.m.33 views

CVE-2017-13082

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the fast BSS transmission FT handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

8.1CVSS7AI score
Exploits0References26
CVE
CVE
added 2017/10/17 1:0 p.m.327 views

CVE-2017-13082

CVE-2017-13082 is one of the KRACK-class WPA2 flaws. Android/Arch/Debian/CentOS references describe an issue where a retransmitted FT Reassociation Request can reinstall the PTK during processing, enabling a nearby attacker to replay, decrypt, or spoof frames. Impact described across sources incl...

8.1CVSS7.7AI score0.04575EPSS
Exploits1References26Affected Software6
OSV
OSV
added 2017/10/16 12:0 a.m.3 views

UBUNTU-CVE-2017-13082

Wi-Fi Protected Access WPA and WPA2 that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the fast BSS transmission FT handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

8.1CVSS7.4AI score0.04575EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.9 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ssh-askpass-ptk package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...

7.2CVSS7.4AI score0.00871EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2014/12/28 2:59 a.m.16 views

CVE-2012-1415

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

6.8CVSS7.1AI score0.0106EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2014/12/28 2:59 a.m.4 views

CVE-2012-1415

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

6.8CVSS5.7AI score0.0106EPSS
Exploits1References2
Prion
Prion
added 2014/12/28 2:59 a.m.16 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

6.8CVSS7.6AI score0.0106EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2014/12/28 2:0 a.m.22 views

CVE-2012-1415

Cross-site request forgery CSRF vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests that trigger a logout...

7.1AI score0.0106EPSS
Exploits1References1
CVE
CVE
added 2014/12/28 2:0 a.m.50 views

CVE-2012-1415

DFLabs PTK is affected by a CSRF in lib/logout.php affecting PTK 1.0.5 and earlier. The vulnerability allows remote attackers to hijack the authentication of administrators or investigators to trigger a logout. Root cause is CSRF in the logout request; versions prior to 1.0.5 are impacted. Public...

6.8CVSS7.3AI score0.0106EPSS
Exploits1References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.32 views

DFLabs PTK <= 1.0 - Local Command Execution Vulnerability

No description provided by source. ==================================================== Security Research Advisory Vulnerability name: DFLabs PTK Local Command Execution Vulnerability Advisory number: LC-2008-07 Advisory URL: http://www.ikkisoft.com...

7.1AI score
Exploits0
Rows per page
Query Builder