BDU:2017-02271

BDU

High

Уязвимость протокола WPA2 (обеспечивающего защиту беспроводных сетей Wi-Fi) связана с ошибками управления криптографическими ключами. Экспл…

CVSS

7.9

High

EPSS

0.00

Published

2017-01-01

Updated

2017-01-01

Description

Уязвимость протокола WPA2 (обеспечивающего защиту беспроводных сетей Wi-Fi) связана с ошибками управления криптографическими ключами. Эксплуатация уязвимости позволяет нарушителю, находящемуся в радиусе действия Wi-Fi сети, получить доступ к зашифрованной информации, передаваемой по беспроводной сети (например, дешифровать или внедрить пакеты данных, перехватить TCP-соединение), в результате переустановки группового ключа (group key) при обработке кадра Wireless Network Management Sleep Mode Response

Affected products

Aruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Airmesh msrAruba networks Aruba 501 wireless client bridge

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Timeline

2017-01-01

Published

2017-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: A

Adjacent Network (A)

Attack Complexity

AC: H

High (H)

Privileges Required

PR: N

None (N)

User Interaction

UI: R

Required (R)

Scope

S: C

Changed (C)

Confidentiality Impact

C: H

High (H)

Integrity Impact

I: H

High (H)

Availability Impact

A: H

High (H)

Exploit indicators

EPSS

0.000 · p0

Known exploited (KEV)

Known exploits — Сканер-ВС

No Сканер-ВС checks registered for this vulnerability yet.

Affected products

Cisco

Ip Phone 8800 Series Aironet Access Point Asa With Firepower Services Small Business 100 Series Wireless Access Point Small Business 300 Series Wireless Access Point Small Business 500 Series Wireless Access Point Dx Series Ip Phones

Intel

Active Management Technology Intel Dual Band Wireless-ac 3165 Intel Dual Band Wireless-ac 3168 Intel Atom Processor C3200 Series For Yocto Project Bsp Intel Dual Band Wireless-ac 3160 Intel Dual Band Wireless-ac 7260 Intel Dual Band Wireless-ac 7265 Intel Dual Band Wireless-ac 8260/8265/9260

Nwa1100-nh Nwa5301-nj Nwa1120 Nwa5120 Wac6100 Wac6500 Wap6405 Wap6804 Wap6806 Wre2206+2

Aruba Networks

Aruba Instant Aruba 501 Wireless Client Bridge Airmesh Msr Clarity Engine Hp 501 Wireless Client Bridge

Freebsd Project

Wpa Supplicant

Ubiquiti Networks

Airmax Ac Airmax M Uap Usw

Peplink

Device Connector Max Mediafast Soho

Jouni Malinen

Wpa Supplicant Hostapd

Watchguard Technologies

Access Points Ap100 Access Points Ap102 Access Points Ap120 Access Points Ap200 Access Points Ap300 Access Points Ap320 Access Points Ap322 Access Points Ap420 Appliances 26-w Appliances 33-w+4

Sierra Wireless

Gx400/440 Gx450 Legato Mgos

Espressif Systems (shanghai)

Espressif Iot Development Framework

Microchip Technology

Rn131 Rn171 Rn1810 Winc15x0

Product	Vendor	Status
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
airmesh msr	aruba networks	Tracked
aruba 501 wireless client bridge	aruba networks	Tracked

Showing first 20 of 1824

Source databases

BDU

Related vulnerabilities

CVE-2017-13087

External references

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13087@http://ubuntu.com/usn/usn-3455@http://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20171016-wpa.html@http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10827@https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00101@http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt@https://papers.mathyvanhoef.com/ccs2017.pdf@https://www.kb.cert.org/vuls/id/228519@http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt@https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa@https://github.com/espressif/ESP8266_RTOS_SDK/commit/2fab9e23d779cdd6e5900b8ba2b588e30d9b08c4@http://docs.fortinet.com/uploaded/files/3961/fortiap-v5.6.1-release-notes.pdf@http://vuxml.freebsd.org/freebsd/d670a953-b2a1-11e7-a633-009c02a2ab30.html@https://w1.fi/security/2017-1/@https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00101&languageid=en-fr@http://www.microchip.com/design-centers/wireless-connectivity/embedded-wi-fi/wpa2-protocol-vulnerability@https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080@https://forum.peplink.com/t/security-advisory-krack-wpa2-vulnerability-vu-228519/12715@https://source.sierrawireless.com/~/media/support_downloads/airlink/docs/technical%20bulletin/wpa_swi_summaryv4.ashx?la=en@https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v6-0-7-Has-Been-Released/ba-p/2056522@https://community.ubnt.com/t5/airMAX-Updates-Blog/airOS-v8-4-0-Has-Been-Released/ba-p/2081100@https://usn.ubuntu.com/usn/usn-3455-1/@https://www.watchguard.com/wgrd-blog/wpa-and-wpa2-vulnerabilities-update@http://www.zyxel.com/support/announcement_wpa2_key_management.shtml