CVE

Id
52965  
CVE No.
CVE-2011-5053  
Status
Candidate  
Description
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.  
Phase
Assigned (20120106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561248 52965 CVE-2011-5053 MISC:http://code.google.com/p/reaver-wps/  View
561249 52965 CVE-2011-5053 MISC:http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf  View
561250 52965 CVE-2011-5053 MISC:http://sviehb.wordpress.com/2011/12/27/wi-fi-protected-setup-pin-brute-force-vulnerability/  View
561251 52965 CVE-2011-5053 CISCO:20120111 Wi-Fi Protected Setup PIN Brute Force Vulnerability  View
561252 52965 CVE-2011-5053 URL:http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20120111-wps  View
561253 52965 CVE-2011-5053 CERT:TA12-006A  View
561254 52965 CVE-2011-5053 URL:http://www.us-cert.gov/cas/techalerts/TA12-006A.html  View
561255 52965 CVE-2011-5053 CERT-VN:VU#723755  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25342 JVNDB-2012-001049 3S CoDeSys における任意のディレクトリを作成される脆弱性 3S CoDeSys の Control サービス内にある CmpWebServer.dll モジュールには、web root 下に任意のディレクトリを作成される脆弱性が存在します。 CVE-2011-5058 52965 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001049.html  View