CVE-2017-13080: CVE-2017-13080

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-13080

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

在加密中重用Nonce与密钥对

Source: NVD (National Vulnerability Database)

Vulnerability Title

Intel PROSet/Wireless WiFi Software 安全特征问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Intel PROSet/Wireless WiFi Software是美国英特尔（Intel）公司的一款无线网卡驱动程序。 Intel PROSet/Wireless WiFi Software 存在安全特征问题漏洞。攻击者可利用该漏洞在组密钥握手中重新安装组密钥（GTK）。以下产商提供的产品受到影响：Aruba Networks；Cisco；Espressif Systems；Fortinet, Inc.；FreeBSD Project；Google；HostAP；Intel Corporation；

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Wi-Fi Alliance	Wi-Fi Protected Access (WPA and WPA2)	WPA	-

II. Public POCs for CVE-2017-13080

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2017-13080

Please Login to view more intelligence information

https://cert.vde.com/en-us/advisories/vde-2017-005x_refsource_CONFIRM
https://support.apple.com/HT208327x_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txtx_refsource_CONFIRM
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txtx_refsource_MISC
https://support.apple.com/HT208219x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdfx_refsource_CONFIRM
https://support.apple.com/HT208222x_refsource_CONFIRM
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402.htmlx_refsource_CONFIRM
https://cert.vde.com/en-us/advisories/vde-2017-003x_refsource_CONFIRM
https://support.lenovo.com/us/en/product_security/LEN-17420x_refsource_CONFIRM
https://source.android.com/security/bulletin/2017-11-01x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlx_refsource_CONFIRM
https://support.apple.com/HT208325x_refsource_CONFIRM
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_usx_refsource_CONFIRM
https://access.redhat.com/security/vulnerabilities/kracksx_refsource_CONFIRM
https://support.apple.com/HT208220x_refsource_CONFIRM
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080x_refsource_CONFIRM
https://support.apple.com/HT208221x_refsource_CONFIRM
https://www.krackattacks.com/x_refsource_MISC
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlx_refsource_CONFIRM
https://support.apple.com/HT208334x_refsource_CONFIRM
http://www.securityfocus.com/bid/101274vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1039585vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039703vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039573vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039578vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039581vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039577vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039572vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039576vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2017/dsa-3999vendor-advisoryx_refsource_DEBIAN
http://www.kb.cert.org/vuls/id/228519third-party-advisoryx_refsource_CERT-VN
http://www.ubuntu.com/usn/USN-3455-1vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2017:2907vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201711-03vendor-advisoryx_refsource_GENTOO
https://access.redhat.com/errata/RHSA-2017:2911vendor-advisoryx_refsource_REDHAT
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.ascvendor-advisoryx_refsource_FREEBSD
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.htmlvendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.htmlvendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.htmlvendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2018/11/msg00015.htmlmailing-listx_refsource_MLIST
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpavendor-advisoryx_refsource_CISCO
https://nvd.nist.gov/vuln/detail/CVE-2017-13080

IV. Related Vulnerabilities

Same product: Wi-Fi Protected Access (WPA and WPA2)

Same vendor: Wi-Fi Alliance

Same weakness: CWE-323

V. Comments for CVE-2017-13080

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2017-13080

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2017-13080

III. Intelligence Information for CVE-2017-13080

IV. Related Vulnerabilities

V. Comments for CVE-2017-13080

Leave a comment