CVE-2020-12484CWE-306

When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a…

Medium · published December 17, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-12-17T02:36Z
EPSS history
Timeline
  • 17 DEC 02:36Z
    When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a…
    cvelistv5