CVE-2025-27558

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. In mesh networks using Wi-Fi Protected Access (WPA, WPA2, or WPA3) or Wired Equivalent Privacy (WEP), an adversary can exploit this vulnerability to inject arbitrary frames towards devices that support receiving non-SSP A-MSDU frames. NOTE: this issue exists because of an incorrect fix for CVE-2020-24588. P802.11-REVme, as of early 2025, is a planned release of the 802.11 standard.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-345

Affected software

No affected versions have been published.

Timeline

Published: May 21, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-275596.7Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially ena CVE-2025-27568.8A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImpor CVE-2025-275606.0Loop with unreachable exit condition ('infinite loop') for some Intel(R) Platform within Ring 0: Kernel may allow a denial of service. Syste CVE-2025-275615.3Unauthenticated attackers can rename "rooms" of arbitrary users.CVE-2025-275625.5in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVE-2025-275635.5in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVE-2025-275655.3An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs.CVE-2025-275667.2Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with ins CVE-2025-275675.4Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerabi CVE-2025-275685.3An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited CVE-2025-27578.8A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_P CVE-2025-275714.3Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to check the "Allow Users to View Archived Channels" configura