PT-2011-1210 · Wi Fi Alliance · Wps

Published 2011-12-27 · Updated 2013-01-15 · CVE-2011-5053

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions WPS protocol (affected versions not specified)

Description The issue concerns the Wi-Fi Protected Setup (WPS) protocol, specifically when using the "external registrar" authentication method. It fails to properly inform clients about failed PIN authentication attempts, making it easier for remote attackers to discover the PIN value. This can lead to the discovery of the Wi-Fi network password or the reconfiguration of an access point by reading EAP-NACK messages. The vulnerability allows an attacker to obtain the WPA PSK-key by brute-forcing the PIN code through the WPS protocol, potentially enabling them to connect to the wireless network, change device configurations, or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2015-10982

CVE-2011-5053

Affected Products

Wps

References · 19

• 🔥 https://exploit-db.com/exploits/18291 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5053 · Security Note
• https://bdu.fstec.ru/vul/2015-10982 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5053 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20120111-wps · Vendor Advisory
• http://zyxel.com/support/announcement_wps_brute_force_attack.shtml · Note
• http://kb.netgear.ru/app/answers/detail/a_id/19824 · Note
• http://linksys.com/ru/support-article?articleNum=138091 · Note
• http://zyxel.com/uploads/images/public/How-To-Disable-WPS-For-ZyXEL-devices.pdf · Note
• https://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf · Note
• http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf · Note
• https://sviehb.wordpress.com/2011/12/27/wi-fi-protected-setup-pin-brute-force-vulnerability · Note
• http://kb.cert.org/vuls/id/723755 · Note
• https://kb.cert.org/vuls/id/723755 · Note
• http://spark.co.nz/help/internet-data/equipment/thomson/tg585/wps-security-risk-technicolor-tg582n-tg585v8-and-tg797n · Note