CVE-2018-14526

An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6

published August 8, 2018

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01562 · 75.1th percentile
Published
2018-08-08T19:00Z
EPSS history
Timeline
  • 08 AUG 19:00Z
    An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6
    cvelistv5