PT-2020-15026

CVE-2020-17497

Published

2020-08-12

Updated

2020-08-19

CVSS 3.1

8.1

High

MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IWD versions through 1.8

Description The issue in eapol.c allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4.

Recommendations For IWD versions through 1.8, update to a version that contains a fix for this issue to prevent PTK reinstallation attacks.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾