Reusing a Nonce, Key Pair in Encryption
CVE-2017-13078
Summary
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
- HIGH
- ADJACENT_NETWORK
- HIGH
- UNCHANGED
- NONE
- NONE
- NONE
- NONE
CWE-323 - Reusing a Nonce, Key Pair in Encryption
Nonces should be used for the present occasion and only once.
References
Advisory Timeline
- Published
