CVE-2017-13080

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.

• CWE-323
• CWE-330

• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.htmlThird Party Advisory
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txtThird Party Advisory
• http://www.debian.org/security/2017/dsa-3999Third Party Advisory
• http://www.kb.cert.org/vuls/id/228519Third Party Advisory, US Government Resource
• http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
• http://www.securityfocus.com/bid/101274Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039572Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039573Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039576Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039577Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039578Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039581Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039585Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039703
• http://www.ubuntu.com/usn/USN-3455-1Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:2907Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:2911Third Party Advisory
• https://access.redhat.com/security/vulnerabilities/kracksThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
• https://cert.vde.com/en-us/advisories/vde-2017-003
• https://cert.vde.com/en-us/advisories/vde-2017-005
• https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
• https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080Vendor Advisory
• https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.ascThird Party Advisory
• https://security.gentoo.org/glsa/201711-03
• https://source.android.com/security/bulletin/2017-11-01
• https://support.apple.com/HT208219
• https://support.apple.com/HT208220
• https://support.apple.com/HT208221
• https://support.apple.com/HT208222
• https://support.apple.com/HT208325
• https://support.apple.com/HT208327
• https://support.apple.com/HT208334
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us
• https://support.lenovo.com/us/en/product_security/LEN-17420Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpaThird Party Advisory
• https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txtThird Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402.html
• https://www.krackattacks.com/Technical Description, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.htmlThird Party Advisory
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txtThird Party Advisory
• http://www.debian.org/security/2017/dsa-3999Third Party Advisory
• http://www.kb.cert.org/vuls/id/228519Third Party Advisory, US Government Resource
• http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
• http://www.securityfocus.com/bid/101274Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039572Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039573Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039576Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039577Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039578Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039581Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039585Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039703
• http://www.ubuntu.com/usn/USN-3455-1Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:2907Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:2911Third Party Advisory
• https://access.redhat.com/security/vulnerabilities/kracksThird Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-901333.pdf
• https://cert.vde.com/en-us/advisories/vde-2017-003
• https://cert.vde.com/en-us/advisories/vde-2017-005
• https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
• https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-13080Vendor Advisory
• https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.ascThird Party Advisory
• https://security.gentoo.org/glsa/201711-03
• https://source.android.com/security/bulletin/2017-11-01
• https://support.apple.com/HT208219
• https://support.apple.com/HT208220
• https://support.apple.com/HT208221
• https://support.apple.com/HT208222
• https://support.apple.com/HT208325
• https://support.apple.com/HT208327
• https://support.apple.com/HT208334
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_us
• https://support.lenovo.com/us/en/product_security/LEN-17420Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpaThird Party Advisory
• https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txtThird Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402.html
• https://www.krackattacks.com/Technical Description, Third Party Advisory

Published

Oct 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13072Cross-site scripting (XSS) vulnerability in App Center in QN…
• CVE-2017-13073Cross-site scripting (XSS) vulnerability in QNAP NAS applica…
• CVE-2017-13077Wi-Fi Protected Access (WPA and WPA2) allows reinstallation …
• CVE-2017-13078Wi-Fi Protected Access (WPA and WPA2) allows reinstallation …
• CVE-2017-13079Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802…
• CVE-2017-1308IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 a…
• CVE-2017-13081Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802…
• CVE-2017-13082Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802…
• CVE-2017-13083Akeo Consulting Rufus prior to version 2.17.1187 does not ad…5.3
• CVE-2017-13084Wi-Fi Protected Access (WPA and WPA2) allows reinstallation …
• CVE-2017-13086Wi-Fi Protected Access (WPA and WPA2) allows reinstallation …
• CVE-2017-13087Wi-Fi Protected Access (WPA and WPA2) that support 802.11v a…