CVE-2025-24912
CVE-2025-24912
Título es
CVE-2025-24912
Mié, 12/03/2025 – 05:15
Tipo
CWE-826
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2025-24912
Descripción en
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.
12/03/2025
12/03/2025
Vector CVSS:3.1
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Gravedad 3.1 (CVSS 3.1 Base Score)
3.70
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
LOW
Referencias
https://jvn.jp/en/jp/JVN19358384/
https://w1.fi/cgit/hostap/commit/?id=339a334551ca911187cc870f4f97ef08e11db109
https://w1.fi/cgit/hostap/commit/?id=726432d7622cc0088ac353d073b59628b590ea44
https://w1.fi/hostapd/
Enviar en el boletín
Off
