PT-2023-2034 · Unknown+1 · Ieee 802.11+1
Published
2023-03-28
·
Updated
2023-09-07
·
CVE-2022-47522
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
IEEE 802.11 specifications through 802.11ax
Description
The issue allows physically proximate attackers to intercept target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point to remove the target's original security context. This behavior occurs because the specifications do not require an access point to purge its transmit queue before removing a client's pairwise encryption key. The vulnerability can be exploited to bypass encryption in wireless networks and may be used to intercept traffic from isolated clients.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Inadequate Encryption Strength
Authentication Bypass by Spoofing
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Freebsd
Ieee 802.11