İçeriğe atla
Noroxi

w1.fi kayıtları

w1.fi üreticisine ait 50 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%94
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

50 kayıt
  • CVE-2022-23303
    40Planlayın

    The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    w1.fi · hostapd16 Oca 2022

  • CVE-2022-23304
    40Planlayın

    The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of c

    KritikCVSS 9,8İstismar yokEPSS %1

    w1.fi · hostapd16 Oca 2022

  • CVE-2020-12695
    35İzleyin

    The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delive

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    nec · wr8165n8 Haz 2020

  • CVE-2019-9497
    33İzleyin

    The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit

    YüksekCVSS 8,1İstismar yokEPSS %4

    w1.fi · hostapd17 Nis 2019

  • CVE-2017-13082
    33İzleyin

    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK)

    YüksekCVSS 8,1İstismar yokEPSS %4

    canonical · ubuntu linux17 Eki 2017

  • CVE-2019-9498
    33İzleyin

    The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit

    YüksekCVSS 8,1İstismar yokEPSS %2

    w1.fi · hostapd17 Nis 2019

  • CVE-2019-9499
    33İzleyin

    The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit

    YüksekCVSS 8,1İstismar yokEPSS %2

    w1.fi · hostapd17 Nis 2019

  • CVE-2019-9496
    31İzleyin

    An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps

    YüksekCVSS 7,5İstismar yokEPSS %4

    w1.fi · hostapd17 Nis 2019

  • CVE-2019-10064
    31İzleyin

    hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom(

    YüksekCVSS 7,5İstismar yokEPSS %3

    w1.fi · hostapd28 Şub 2020

  • CVE-2016-4476
    31İzleyin

    hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows rem

    YüksekCVSS 7,5İstismar yokEPSS %2

    w1.fi · hostapd9 May 2016

  • CVE-2016-10743
    31İzleyin

    hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.

    YüksekCVSS 7,5İstismar yokEPSS %2

    w1.fi · hostapd23 Mar 2019

  • CVE-2024-5290
    31İzleyin

    An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged att

    YüksekCVSS 7,8İstismar yokEPSS %0

    w1.fi · wpa supplicant7 Ağu 2024

  • CVE-2021-27803
    30İzleyin

    A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests.

    YüksekCVSS 7,5İstismar yokEPSS %1

    w1.fi · wpa supplicant26 Şub 2021

  • CVE-2014-3686
    28İzleyin

    wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts,

    OrtaCVSS 6,8İstismar yokEPSS %4

    w1.fi · hostapd15 Eki 2014

  • CVE-2017-13077
    28İzleyin

    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handsh

    OrtaCVSS 6,8İstismar yokEPSS %2

    canonical · ubuntu linux16 Eki 2017

  • CVE-2017-13084
    28İzleyin

    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey han

    OrtaCVSS 6,8İstismar yokEPSS %2

    canonical · ubuntu linux17 Eki 2017

  • CVE-2017-13086
    28İzleyin

    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshak

    OrtaCVSS 6,8İstismar yokEPSS %2

    canonical · ubuntu linux17 Eki 2017

  • CVE-2026-58374
    28İzleyin

    In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing

    YüksekCVSS 7,1İstismar yokEPSS %0

    w1.fi · hostapd30 Haz 2026

  • CVE-2018-14526
    26İzleyin

    An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6.

    OrtaCVSS 6,5İstismar yokEPSS %1

    canonical · ubuntu linux8 Ağu 2018

  • CVE-2019-16275
    26İzleyin

    hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source addre

    OrtaCVSS 6,5İstismar yokEPSS %1

    w1.fi · hostapd12 Eyl 2019

  • CVE-2023-52160
    26İzleyin

    The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass.

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    debian · debian linux22 Şub 2024

  • CVE-2019-5061
    26İzleyin

    An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates f

    OrtaCVSS 6,5İstismar yokEPSS %0

    w1.fi · hostapd12 Ara 2019

  • CVE-2019-5062
    26İzleyin

    An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 80

    OrtaCVSS 6,5İstismar yokEPSS %0

    w1.fi · hostapd12 Ara 2019

  • CVE-2022-37660
    26İzleyin

    In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association.

    OrtaCVSS 6,5İstismar yokEPSS %0

    w1.fi · hostapd11 Şub 2025

  • CVE-2015-1863
    25İzleyin

    Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or p

    OrtaCVSS 5,8İstismar yokEPSS %5

    canonical · ubuntu linux28 Nis 2015