CVE-2024-20153CWE-304

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID

High · published January 6, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
24.6
In the wild
Unconfirmed
What it is

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.6th percentile
Weakness
CWE-304 · Missing Critical Step in Authentication
Published
2025-01-06T03:18Z
EPSS history
Timeline
  • 06 JAN 03:18Z
    In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID
    cvelistv5