W1
Vendor
w1.fi
80
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-58374 | HO hostapd w1.fi | 7.1 | Jun 30 | In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing allows an unauthenticated attacker… |
| CVE-2025-24912 | HO Hostapd W1.fi | 3.7 | Mar 12 | hostapd fails to process crafted RADIUS packets properly |
| CVE-2022-37660 | HO Hostapd W1.fi | 6.5 | Feb 11 | In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association |
| CVE-2024-5290 | WS Wpa Supplicant W1.fi | 7.8 | Aug 7 | An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the… |
| CVE-2023-52160 | WS Wpa Supplicant W1.fi | 6.5 | Feb 22 | The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass |
| CVE-2022-23304 | WS Wpa Supplicant W1.fi | 9.8 | Jan 17 | The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns |
| CVE-2022-23303 | HO Hostapd W1.fi | 9.8 | Jan 17 | The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns |
| CVE-2021-30004 | HO Hostapd W1.fi | 5.3 | Apr 2 | In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c |
| CVE-2021-27803 | WS Wpa Supplicant W1.fi | 7.5 | Feb 26 | A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests |
| CVE-2020-12695 | HO Hostapd W1.fi | 7.5 | Jun 8 | The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment… |
| CVE-2019-10064 | HO Hostapd W1.fi | 7.5 | Feb 28 | hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate… |
| CVE-2019-5062 | HO Hostapd W1.fi | 6.5 | Dec 12 | An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions |
| CVE-2019-5061 | HO Hostapd W1.fi | 6.5 | Dec 12 | An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required… |
| CVE-2019-16275 | HO Hostapd W1.fi | 6.5 | Sep 12 | hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled |
| CVE-2019-13377 | HO Hostapd W1.fi | 5.9 | Aug 15 | The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache… |
| CVE-2019-11555 | HO Hostapd W1.fi | 5.9 | Apr 26 | The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where… |
| CVE-2019-9499 | HO Hostapd W1.fi | 8.1 | Apr 17 | The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and… |
| CVE-2019-9498 | HO Hostapd W1.fi | 8.1 | Apr 17 | The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element… |
| CVE-2019-9497 | HO Hostapd W1.fi | 8.1 | Apr 17 | The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit |
| CVE-2019-9496 | HO Hostapd W1.fi | 7.5 | Apr 17 | An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd/AP… |
| CVE-2019-9495 | HO Hostapd W1.fi | 3.7 | Apr 17 | The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns |
| CVE-2019-9494 | HO Hostapd W1.fi | 5.9 | Apr 17 | The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns |
| CVE-2016-10743 | HO Hostapd W1.fi | 7.5 | Mar 23 | hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call |
| CVE-2018-14526 | WS Wpa Supplicant W1.fi | 6.5 | Aug 8 | An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6 |
| CVE-2015-5316 | WS Wpa Supplicant W1.fi | 5.9 | Feb 21 | The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote… |
| CVE-2015-5315 | WS Wpa Supplicant W1.fi | 5.9 | Feb 21 | The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when… |
| CVE-2015-5314 | WS Wpa Supplicant W1.fi | 5.9 | Feb 21 | The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used… |
| CVE-2017-13088 | HO Hostapd W1.fi | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… |
| CVE-2017-13087 | HO Hostapd W1.fi | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… |
| CVE-2017-13086 | HO Hostapd W1.fi | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio… |
| CVE-2017-13084 | HO Hostapd W1.fi | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within… |
| CVE-2017-13082 | HO Hostapd W1.fi | 8.1 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT)… |
| CVE-2017-13081 | HO Hostapd W1.fi | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… |
| CVE-2017-13080 | HO Hostapd W1.fi | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… |
| CVE-2017-13079 | HO Hostapd W1.fi | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… |
| CVE-2017-13078 | HO Hostapd W1.fi | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… |
| CVE-2017-13077 | HO Hostapd W1.fi | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio… |
| CVE-2015-0210 | WS Wpa Supplicant W1.fi | 5.9 | Aug 28 | wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack |
| CVE-2016-4476 | HO Hostapd W1.fi | 7.5 | May 9 | hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of… |
| CVE-2015-8041 | WS Wpa Supplicant W1.fi | – | Nov 9 | Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or… |
| CVE-2015-4146 | WS Wpa Supplicant W1.fi | – | Jun 15 | The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be… |
| CVE-2015-4145 | HO Hostapd W1.fi | – | Jun 15 | The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to… |
| CVE-2015-4144 | HO Hostapd W1.fi | – | Jun 15 | The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which… |
| CVE-2015-4143 | WS Wpa Supplicant W1.fi | – | Jun 15 | The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a… |
| CVE-2015-4142 | WS Wpa Supplicant W1.fi | – | Jun 15 | Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote… |
| CVE-2015-4141 | WS Wpa Supplicant W1.fi | – | Jun 15 | The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of… |
| CVE-2015-1863 | WS Wpa Supplicant W1.fi | – | Apr 28 | Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via… |
| CVE-2014-3686 | HO Hostapd W1.fi | – | Oct 16 | wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute… |
| CVE-2012-4445 | HO Hostapd W1.fi | – | Oct 10 | Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote… |
| CVE-2012-2389 | HO Hostapd W1.fi | – | Jun 21 | hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as… |