Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

hostapd with EAP-pwd support — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in hostapd with EAP-pwd support, with AI-generated Chinese analysis, references, and POCs.

Vendor: Wi-Fi Alliance

CVE IDTitleCVSSSeverityPublished
CVE-2019-9495 The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns CWE-524 5.9 -2019-04-17
CVE-2019-9497 The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit CWE-301 9.8 -2019-04-17
CVE-2019-9498 The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit CWE-346 8.1 -2019-04-17
CVE-2019-9499 The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit CWE-346 8.1 -2019-04-17

All 4 known CVE vulnerabilities affecting hostapd with EAP-pwd support with full Chinese analysis, references, and POCs where available.