cbcvebase.
CVE-2017-13080
published 2017-10-17

CVE-2017-13080: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio…

medium5.3CVSS 3.0
AVAACHPRNUINSUCNIHAN
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

Affected

121 ranges· showing 25
VendorProductVersion rangeFixed in
appleairport_base_station_firmware_update
appleairport_base_station_firmware_update
appleios
appleios
applemacos_high_sierra_10.13.1_security_update_2017-001_sierra_and_security_update_20
applemacos_high_sierra_10.13.4_security_update_2018-002_sierra_and_security_update_20
appletvos
appletvos
applewatchos
applewatchos
applewi-fi_update_for_boot_camp
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debianfirmware-nonfree< firmware-nonfree 20180825-1 (bookworm)firmware-nonfree 20180825-1 (bookworm)
debianlinux< firmware-nonfree 20180825-1 (bookworm)firmware-nonfree 20180825-1 (bookworm)
debianwpa< firmware-nonfree 20180825-1 (bookworm)firmware-nonfree 20180825-1 (bookworm)
freebsdfreebsd
freebsdfreebsd
freebsdfreebsd
freebsdfreebsd
googleandroid
linuxlinux_kernel>= 0 < 4.13.13-14.13.13-1

CVSS provenance

nvdv3.05.3MEDIUMCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
osv7.5HIGH