PT-2019-6764 · Networkmanager · Networkmanager

Vincent Danen · Published 2019-12-26 · Updated 2020-08-18 · CVE-2012-2736

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NetworkManager version 0.9.2.0

Description The issue arises when a new wireless network is created with WPA/WPA2 security in AdHoc mode, resulting in the creation of an open or insecure network.

Recommendations For NetworkManager version 0.9.2.0, consider configuring the network settings manually to ensure the creation of a secure network, as the automatic setup may lead to an insecure configuration.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2012-2736

Affected Products

Networkmanager

References · 12

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2736 · Exploit
• http://openwall.com/lists/oss-security/2012/06/15/4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2736 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-2736 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-2736 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-2736 · Security Note
• http://openwall.com/lists/oss-security/2012/06/15/2 · Note
• https://access.redhat.com/security/cve/cve-2012-2736 · Note
• http://ubuntu.com/usn/USN-1483-2 · Note
• https://t.me/cibsecurity/8858 · Telegram Post
• http://ubuntu.com/usn/USN-1483-1 · Note