CVE-2022-23303

The implementations of SAE in hostapd before 2.10 and wpasupplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494...

hostapd 加密问题漏洞

hostapd is a user space daemon for access points and authentication servers. A cryptographic issue vulnerability exists in hostapd that stems from a cached access mode error in the hostapd and wpa supplicant components of the product. An attacker could launch a side-channel attack via this...

CVE-2021-40288

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames...

Authentication flaw

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames...

CVE-2021-40288

CVE-2021-40288 affects TP-Link AX10v1 prior to V1_211014. An unauthenticated remote attacker can cause a denial of service by sending spoofed authentication frames targeting the WPA2/WPA3-SAE authentication process, disconnecting an already connected wireless client. Connected documents specify t...

CVE-2021-40288

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1211014, allows a remote unauthenticated attacker to disconnect an already connected wireless client via sending with a wireless adapter specific spoofed authentication frames...

CVE-2021-37910

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

CVE-2021-37910

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

CVE-2021-37910

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

Design/Logic Flaw

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

CVE-2021-37910 ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication

ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...

CVE-2021-37910

CVE-2021-37910 affects ASUS routers (WPA2/WPA3-SAE) and describes an improper control of interaction frequency that allows an unauthenticated attacker to remotely disconnect other users by sending crafted SAE authentication frames. Publicly documented impact is a DoS-like disruption to client con...

D-Link DIR-X6060 and D-Link DIR-X1560 Denial of Service Vulnerability

The D-Link DIR-X6060 and D-Link DIR-X1560 are both routers from D-Link, a Taiwan-based company. The security vulnerabilities in the D-Link DIR-X6060 and D-Link DIR-X1560 could be exploited to disconnect wireless clients by sending specific spoofed SAE authentication frames...

CVE-2021-41753

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...

Authentication flaw

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...

CVE-2021-41753

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...

CVE-2021-41753

The CVE-2021-41753 entry concerns D-Link DIR-X1560 (v1.04B04) and DIR-X6060 (v1.11B04) where a remote, unauthenticated attacker can cause a denial of service by sending specific spoofed SAE authentication frames to trigger disconnection of a wireless client. Connected sources corroborate the affe...

Advisory ROSA-SA-2021-1998

Software: wpasupplicant 2.6 OS: Cobalt 7.9 CVE-ID: CVE-2017-13084 CVE-Crit: MEDIUM CVE-DESC: Wi-Fi Protected Access WPA and WPA2 allows the Station-to-Station-Link STSL temporary key STK to be reassigned during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or...

EulerOS 2.0 SP3 : wpa_supplicant (EulerOS-SA-2021-1860)

According to the versions of the wpasupplicant package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It...

SUSE: Security Advisory (SUSE-SU-2020:3424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...