CVE-2017-13082

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-323CWE-330

Affected software

VendorProductVersions
Wi-Fi AllianceWi-Fi Protected Access (WPA and WPA2)WPA; WPA2

References

Timeline

Published
Oct 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-130838.1Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attCVE-2017-130846.8Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey hanCVE-2017-130866.8Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshakCVE-2017-130875.3Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless CVE-2017-130885.3Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing CVE-2017-130898.8The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked CVE-2017-13097.8IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. ICVE-2017-130908.8The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunCVE-2017-130917.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of aCVE-2017-130927.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of aCVE-2017-130937.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of aCVE-2017-130947.8The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as the management of a
CVE-2017-13082: High severity, CVSS 8.1 | Vulnix