CVE-2014-3686

Name of the Vulnerable Software and Affected Versions wpa supplicant and hostapd versions 0.7.2 through 2.2

Description The issue allows remote attackers to execute arbitrary commands via a crafted frame when running with certain configurations and using wpa cli or hostapd cli with action scripts. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out remotely.

Recommendations For versions 0.7.2 through 2.2, consider disabling the use of wpa cli or hostapd cli with action scripts until a patch is available. Restrict access to the vulnerable configurations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.