V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2017-02264
BDU
High

Уязвимость протокола WPA2 (обеспечивающего защиту беспроводных сетей Wi-Fi) связана с ошибками управления криптографическими ключами. Экспл…

CVSS
7.9
High
EPSS
0.00
p0
Published
2017-01-01
Updated
2017-01-01
Description

Уязвимость протокола WPA2 (обеспечивающего защиту беспроводных сетей Wi-Fi) связана с ошибками управления криптографическими ключами. Эксплуатация уязвимости позволяет нарушителю, находящемуся в радиусе действия Wi-Fi сети, получить доступ к зашифрованной информации, передаваемой по беспроводной сети (например, дешифровать или внедрить пакеты данных, перехватить TCP-соединение), в результате переустановки группового ключа (group key) в ходе аутентификации устройства при подключении к точке доступа Wi-Fi («четырехстороннего рукопожатия»)

Affected products
Aruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Aruba 501 wireless client bridge
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Timeline
2017-01-01
Published
2017-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: A
Adjacent Network (A)
Attack Complexity
AC: H
High (H)
Privileges Required
PR: N
None (N)
User Interaction
UI: R
Required (R)
Scope
S: C
Changed (C)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Cisco
Ip Phone 8800 SeriesAironet Access PointAsa With Firepower ServicesSmall Business 100 Series Wireless Access PointSmall Business 300 Series Wireless Access PointSmall Business 500 Series Wireless Access PointDx Series Ip Phones
Intel
Active Management TechnologyIntel Dual Band Wireless-ac 3165Intel Dual Band Wireless-ac 3168Intel Atom Processor C3200 Series For Yocto Project BspIntel Dual Band Wireless-ac 3160Intel Dual Band Wireless-ac 7260Intel Dual Band Wireless-ac 7265Intel Dual Band Wireless-ac 8260/8265/9260
Fortinet
Fortiap
Juniper Networks
Screenos
Zyxel Communications
Nwa1100-nhNwa5301-njNwa1120Nwa5120Wac6100Wac6500Wap6405Wap6804Wap6806Wre2206+2
Aruba Networks
Aruba InstantAruba 501 Wireless Client BridgeAirmesh MsrClarity EngineHp 501 Wireless Client Bridge
Freebsd Project
Wpa Supplicant
Ubiquiti Networks
Airmax AcAirmax MUapUsw
Peplink
Device ConnectorMaxMediafastSoho
Jouni Malinen
Wpa SupplicantHostapd
Watchguard Technologies
Access Points Ap100Access Points Ap102Access Points Ap120Access Points Ap200Access Points Ap300Access Points Ap320Access Points Ap322Access Points Ap420Appliances 26-wAppliances 33-w+4
Sierra Wireless
Gx400/440Gx450LegatoMgos
Espressif Systems (shanghai)
Espressif Iot Development Framework
Microchip Technology
Rn131Rn171Rn1810Winc15x0
ProductVendorStatus
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
airmesh msraruba networksTracked
aruba 501 wireless client bridgearuba networksTracked
Showing first 20 of 1824
Source databases
BDU
Related vulnerabilities
CVE-2017-13078
External references
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13078@http://ubuntu.com/usn/usn-3455@http://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20171016-wpa.html@http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10827@https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00101@http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt@https://papers.mathyvanhoef.com/ccs2017.pdf@https://www.kb.cert.org/vuls/id/228519@http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt@https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa@https://github.com/espressif/ESP8266_RTOS_SDK/commit/2fab9e23d779cdd6e5900b8ba2b588e30d9b08c4@http://docs.fortinet.com/uploaded/files/3961/fortiap-v5.6.1-release-notes.pdf@http://vuxml.freebsd.org/freebsd/d670a953-b2a1-11e7-a633-009c02a2ab30.html@https://w1.fi/security/2017-1/@https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00101&languageid=en-fr@http://www.microchip.com/design-centers/wireless-connectivity/embedded-wi-fi/wpa2-protocol-vulnerability@https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080@https://forum.peplink.com/t/security-advisory-krack-wpa2-vulnerability-vu-228519/12715@https://source.sierrawireless.com/~/media/support_downloads/airlink/docs/technical%20bulletin/wpa_swi_summaryv4.ashx?la=en@https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v6-0-7-Has-Been-Released/ba-p/2056522@https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v8-4-0-Has-Been-Released/ba-p/2081100@https://usn.ubuntu.com/usn/usn-3455-1/@https://www.watchguard.com/wgrd-blog/wpa-and-wpa2-vulnerabilities-update@http://www.zyxel.com/support/announcement_wpa2_key_management.shtml