CVE-2017-13088

Published: 16 October 2017

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

Priority

High

CVSS 3 base score: 5.3

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-13088
• https://www.krackattacks.com/
• https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
• https://ubuntu.com/security/notices/USN-3455-1
• NVD
• Launchpad
• Debian