CVE-2023-52424
Description
A flaw was found in the IEEE 802.11 standard. This vulnerability possibly allows an adversary to trick a victim into connecting to an unintended or untrusted network because the SSID is not always used to derive the pairwise master key or session keys and because there is not a protected exchange of an SSID during a 4-way handshake.
Statement
This vulnerability affects networks using the WEP, WPA3 SAE-loop, 802.1x/EAP, FILS, and Mesh AMPE authentication protocols, arising from a design flaw in the WiFi standard IEEE 802.11 allows attackers to trick victims into connecting to less secure networks and intercept their traffic. This significantly impacts Confidentiality, as sensitive data can be intercepted. Integrity is compromised because attackers can alter intercepted data. Availability is also affected, as the attack exploits the auto-disconnect feature in certain VPN clients, causing the VPN to disable when the device connects to a predefined “trusted” WiFi network, leaving the user unprotected. The impact is Moderate, because of the attack limitations: credentials of the valid WiFi network and malicious one suppose to be the same.
Mitigation
Avoid Credential Reuse: One of the key recommendations is to avoid reusing credentials across different SSIDs. Each network should have unique credentials to prevent attackers from easily setting up rogue networks with matching authentication details.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.4 | N/A | N/A |
| Attack Vector | Adjacent Network | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | Required | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | High | N/A | N/A |
| Integrity Impact | High | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Understanding the Weakness (CWE)
Access Control,Integrity,Confidentiality
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity; Read Application Data; Execute Unauthorized Code or Commands
This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or allowing attackers to execute arbitrary code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
