The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) prior to 2.14 allows malicious users to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
intel inet wireless daemon |
Vulmon