QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-13079

Back to search

CVE-2017-13079

Published: Oct 17, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.

VendorProductVersions

Wi-Fi Alliance

Wi-Fi Protected Access (WPA and WPA2)

affected
WPA
affected
WPA2

Weaknesses (CWE)

CWE-323

References

1039581
vdb-entry
x_refsource_SECTRACK
101274
vdb-entry
x_refsource_BID
SUSE-SU-2017:2745
vendor-advisory
x_refsource_SUSE
DSA-3999
vendor-advisory
x_refsource_DEBIAN
1039578
vdb-entry
x_refsource_SECTRACK
1039577
vdb-entry
x_refsource_SECTRACK
openSUSE-SU-2017:2755
vendor-advisory
x_refsource_SUSE
GLSA-201711-03
vendor-advisory
x_refsource_GENTOO
FreeBSD-SA-17:07
vendor-advisory
x_refsource_FREEBSD
1039573
vdb-entry
x_refsource_SECTRACK
SUSE-SU-2017:2752
vendor-advisory
x_refsource_SUSE
1039576
vdb-entry
x_refsource_SECTRACK
1039585
vdb-entry
x_refsource_SECTRACK
VU#228519
third-party-advisory
x_refsource_CERT-VN
USN-3455-1
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now