Strix
26.1K

CVE-2019-9497

UnknownEPSS 5.37%

Last modified

CVE-2019-9497 is a vulnerability of currently unknown severity. The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. EPSS estimates a 5.37% chance of exploitation in the next 30 days.

Description

The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.

Metrics

EPSS Probability
5.37%

91.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
W1.FiHostapd<= 2.4
W1.FiHostapd>= 2.5, <= 2.7
W1.FiWpa Supplicant<= 2.4
W1.FiWpa Supplicant>= 2.5, <= 2.7
FedoraprojectFedora28
FedoraprojectFedora29
FedoraprojectFedora30

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-9497?
The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.
How severe is CVE-2019-9497?
Severity scoring for CVE-2019-9497 is pending analysis. The EPSS model estimates a 5.37% probability of exploitation in the next 30 days.
How do I fix CVE-2019-9497?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-9497?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST