Логотип exploitDog
bind:CVE-2023-52424
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-52424

Количество 5

Количество 5

ubuntu логотип

CVE-2023-52424

больше 1 года назад

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
EPSS: Низкий
redhat логотип

CVE-2023-52424

больше 1 года назад

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2023-52424

больше 1 года назад

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
EPSS: Низкий
github логотип

GHSA-mh3c-527f-cwqv

больше 1 года назад

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
EPSS: Низкий
fstec логотип

BDU:2024-04005

больше 1 года назад

Уязвимость реализации стандарта Wi-Fi IEEE 802.11, связанная с недостаточной защитой служебных данных при обработке SSID-идентификатора, позволяющая нарушителю выполнить перехват трафика путём подмены точки доступа

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-52424

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2023-52424

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2023-52424

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
0%
Низкий
больше 1 года назад
github логотип
GHSA-mh3c-527f-cwqv

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

CVSS3: 7.4
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2024-04005

Уязвимость реализации стандарта Wi-Fi IEEE 802.11, связанная с недостаточной защитой служебных данных при обработке SSID-идентификатора, позволяющая нарушителю выполнить перехват трафика путём подмены точки доступа

CVSS3: 8.8
0%
Низкий
больше 1 года назад

Уязвимостей на страницу