CVE-2011-5053
- State
- Published
- Severity
- Not scored
- Published
- Jan 6, 2012
- Updated
- Aug 7, 2024
- Reserved
- Jan 6, 2012
Description
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://code.google.com/p/reaver-wps/
- http://sviehb.wordpress.com/2011/12/27/wi-fi-protected-setup-pin-brute-force-vulnerability/
- http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf
- VU#723755third-party-advisory
- TA12-006Athird-party-advisory
- 20120111 Wi-Fi Protected Setup PIN Brute Force Vulnerabilityvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.