Auth bypass in W1.fi Hostapd
CVE-2019-5061
An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different…
EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- W1.fi Hostapd — versions 2.6
- N/a W1.f1 — versions hostapd version 2.6 Ubiquiti AP-AC-Pro firmware 4.0.10.9653
Weakness classification (CWE)
References
- talos-cna@cisco.com (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-5061?
- CVE-2019-5061 is a medium-severity vulnerability in W1.fi Hostapd, classified under Expected Behavior Violation. CVSS score: 6.5/10. Published 2019-12-12.
- How severe is CVE-2019-5061?
- Medium severity. CVSS v3 base score is 6.5 out of 10.