CVE-2014-3686

Description

wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

4.674

Associated Vulnerability

Vulnerability	OS Platform
client support for WPA and WPA2 (USN-2383-1) wpasupplicant_2.1-0ubuntu1.4_i386.deb	Linux
client support for WPA and WPA2 (USN-2383-1) wpasupplicant_2.1-0ubuntu1.4_amd64.deb	Linux
SUSE-SU-2015:1013-1(SUSE Linux Enterprise Desktop 12 ) wpa_supplicant-2.2-8.1.x86_64.rpm	Linux
SUSE-SU-2015:1013-1(SUSE Linux Enterprise Desktop 12 ) wpa_supplicant-debuginfo-2.2-8.1.x86_64.rpm	Linux
SUSE-SU-2015:1013-1(SUSE Linux Enterprise Desktop 12 ) wpa_supplicant-debugsource-2.2-8.1.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234