PT-2023-10613 · Unknown · Rofl0R Macgeiger

Published 2023-01-02 · Updated 2024-05-17 · CVE-2017-20161

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rofl0r MacGeiger (affected versions not specified)

Description A problematic vulnerability has been found in rofl0r MacGeiger, affecting the dump wlan at function of the macgeiger.c file in the ESSID Handler component. The manipulation leads to injection, requiring access to the local network to succeed. The complexity of an attack is rather high, and the exploitability is difficult.

Recommendations To fix this issue, it is recommended to apply a patch with the name 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. As a temporary workaround, consider disabling the dump wlan at function until a patch is available. Restrict access to the local network to minimize the risk of exploitation.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-20161

Affected Products

Rofl0R Macgeiger

References · 7

• https://github.com/rofl0r/MacGeiger/commit/57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb · Patch
• https://osv.dev/vulnerability/CVE-2017-20161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20161 · Security Note
• https://t.me/cibsecurity/55738 · Telegram Post
• https://vuldb.com/?id.217188 · Note
• https://t.me/cvenotify/41110 · Telegram Post
• https://vuldb.com/?ctiid.217188 · Note