CVE-2017-13088CWE-323

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network…

published October 17, 2017

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01807 · 78.4th percentile
Weakness
CWE-323 · Reusing a Nonce, Key Pair in Encryption
Published
2017-10-17T13:00Z
EPSS history
Timeline
  • 17 OCT 13:00Z
    Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network…
    cvelistv5