Skip to main content

Reusing a Nonce, Key Pair in Encryption

CVE-2017-13088

Medium
5.3/10

Summary

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

  • HIGH
  • ADJACENT_NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • NONE

CWE-323 - Reusing a Nonce, Key Pair in Encryption

Nonces should be used for the present occasion and only once.

References

Advisory Timeline

  • Published