Advisories · Technology
Wi-Fi Alliance wpa_supplicant with EAP-pwd support.
Every CVE that names Wi-Fi Alliance wpa_supplicant with EAP-pwd support among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit
- Wi-Fi Alliance hostapd with EAP-pwd support
- Wi-Fi Alliance wpa_supplicant with EAP-pwd support
- CWE-346
-
The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit
- Wi-Fi Alliance hostapd with EAP-pwd support
- Wi-Fi Alliance wpa_supplicant with EAP-pwd support
- CWE-346
-
The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit
- Wi-Fi Alliance hostapd with EAP-pwd support
- Wi-Fi Alliance wpa_supplicant with EAP-pwd support
- CWE-301
-
The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns
- Wi-Fi Alliance hostapd with EAP-pwd support
- Wi-Fi Alliance wpa_supplicant with EAP-pwd support
- CWE-524