CVE-2011-5053

The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN…

published January 6, 2012

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03266 · 88.3th percentile
Published
2012-01-06T20:00Z
EPSS history
Timeline
  • 06 JAN 20:00Z
    The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN…
    cvelistv5