[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMVnqV77zI8vA8ZFpvCMpQUlNsizZh85a-u4Y13awpg4":3,"g5a-ex:w1.fi\u002Fwpa_supplicant@*":331,"g5a-family:w1.fi\u002Fwpa_supplicant":333},{"success":4,"data":5},true,{"product":6,"versions":172,"topVulnerabilitiesByEpss":248,"kevVulnerabilities":308,"seoMetadata":309,"meta":328},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":171},"w1.fi","wpa_supplicant",75,39,0,"2024-08-07",[14,17,19,21,23,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,131,133,135,138,141,144,146,148,150,152,154,156,159,161,163,165,167,169],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.3",{"version":24,"cve_count":25,"kev_count":11,"has_kev":16},"0.2.4",10,{"version":27,"cve_count":25,"kev_count":11,"has_kev":16},"0.2.5",{"version":29,"cve_count":25,"kev_count":11,"has_kev":16},"0.2.6",{"version":31,"cve_count":25,"kev_count":11,"has_kev":16},"0.2.7",{"version":33,"cve_count":25,"kev_count":11,"has_kev":16},"0.2.8",{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.1",{"version":39,"cve_count":25,"kev_count":11,"has_kev":16},"0.3.10",{"version":41,"cve_count":25,"kev_count":11,"has_kev":16},"0.3.11",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.2",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.3",{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.4",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.5",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.6",{"version":53,"cve_count":25,"kev_count":11,"has_kev":16},"0.3.7",{"version":55,"cve_count":25,"kev_count":11,"has_kev":16},"0.3.8",{"version":57,"cve_count":25,"kev_count":11,"has_kev":16},"0.3.9",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.1",{"version":63,"cve_count":25,"kev_count":11,"has_kev":16},"0.4.10",{"version":65,"cve_count":25,"kev_count":11,"has_kev":16},"0.4.11",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.2",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.3",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.4",{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.5",{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.6",{"version":77,"cve_count":25,"kev_count":11,"has_kev":16},"0.4.7",{"version":79,"cve_count":25,"kev_count":11,"has_kev":16},"0.4.8",{"version":81,"cve_count":25,"kev_count":11,"has_kev":16},"0.4.9",{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":87,"cve_count":25,"kev_count":11,"has_kev":16},"0.5.10",{"version":89,"cve_count":25,"kev_count":11,"has_kev":16},"0.5.11",{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.2",{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.3",{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.4",{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.5",{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.6",{"version":101,"cve_count":25,"kev_count":11,"has_kev":16},"0.5.7",{"version":103,"cve_count":25,"kev_count":11,"has_kev":16},"0.5.8",{"version":105,"cve_count":25,"kev_count":11,"has_kev":16},"0.5.9",{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.1",{"version":111,"cve_count":25,"kev_count":11,"has_kev":16},"0.6.10",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.2",{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.3",{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.4",{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.5",{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.6",{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.7",{"version":125,"cve_count":25,"kev_count":11,"has_kev":16},"0.6.8",{"version":127,"cve_count":25,"kev_count":11,"has_kev":16},"0.6.9",{"version":129,"cve_count":130,"kev_count":11,"has_kev":16},"0.7.0",2,{"version":132,"cve_count":130,"kev_count":11,"has_kev":16},"0.7.1",{"version":134,"cve_count":130,"kev_count":11,"has_kev":16},"0.7.2",{"version":136,"cve_count":137,"kev_count":11,"has_kev":16},"0.72",1,{"version":139,"cve_count":140,"kev_count":11,"has_kev":16},"0.7.3",12,{"version":142,"cve_count":143,"kev_count":11,"has_kev":16},"1.0",18,{"version":145,"cve_count":143,"kev_count":11,"has_kev":16},"1.1",{"version":147,"cve_count":143,"kev_count":11,"has_kev":16},"2.0",{"version":149,"cve_count":137,"kev_count":11,"has_kev":16},"2.0-16",{"version":151,"cve_count":143,"kev_count":11,"has_kev":16},"2.1",{"version":153,"cve_count":11,"kev_count":11,"has_kev":16},"2.10",{"version":155,"cve_count":143,"kev_count":11,"has_kev":16},"2.2",{"version":157,"cve_count":158,"kev_count":11,"has_kev":16},"2.3",17,{"version":160,"cve_count":158,"kev_count":11,"has_kev":16},"2.4",{"version":162,"cve_count":25,"kev_count":11,"has_kev":16},"2.5",{"version":164,"cve_count":25,"kev_count":11,"has_kev":16},"2.6",{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},"2.7",{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},"2.8",{"version":170,"cve_count":137,"kev_count":11,"has_kev":16},"2.9","Wpa Supplicant by W1.fi is a technology product with 75 tracked versions and 39 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":25,"kev_count":11,"has_kev":16},{"version":27,"cve_count":25,"kev_count":11,"has_kev":16},{"version":29,"cve_count":25,"kev_count":11,"has_kev":16},{"version":31,"cve_count":25,"kev_count":11,"has_kev":16},{"version":33,"cve_count":25,"kev_count":11,"has_kev":16},{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},{"version":39,"cve_count":25,"kev_count":11,"has_kev":16},{"version":41,"cve_count":25,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":25,"kev_count":11,"has_kev":16},{"version":55,"cve_count":25,"kev_count":11,"has_kev":16},{"version":57,"cve_count":25,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":25,"kev_count":11,"has_kev":16},{"version":65,"cve_count":25,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},{"version":77,"cve_count":25,"kev_count":11,"has_kev":16},{"version":79,"cve_count":25,"kev_count":11,"has_kev":16},{"version":81,"cve_count":25,"kev_count":11,"has_kev":16},{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},{"version":87,"cve_count":25,"kev_count":11,"has_kev":16},{"version":89,"cve_count":25,"kev_count":11,"has_kev":16},{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},{"version":93,"cve_count":11,"kev_count":11,"has_kev":16},{"version":95,"cve_count":11,"kev_count":11,"has_kev":16},{"version":97,"cve_count":11,"kev_count":11,"has_kev":16},{"version":99,"cve_count":11,"kev_count":11,"has_kev":16},{"version":101,"cve_count":25,"kev_count":11,"has_kev":16},{"version":103,"cve_count":25,"kev_count":11,"has_kev":16},{"version":105,"cve_count":25,"kev_count":11,"has_kev":16},{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":25,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},{"version":115,"cve_count":11,"kev_count":11,"has_kev":16},{"version":117,"cve_count":11,"kev_count":11,"has_kev":16},{"version":119,"cve_count":11,"kev_count":11,"has_kev":16},{"version":121,"cve_count":11,"kev_count":11,"has_kev":16},{"version":123,"cve_count":11,"kev_count":11,"has_kev":16},{"version":125,"cve_count":25,"kev_count":11,"has_kev":16},{"version":127,"cve_count":25,"kev_count":11,"has_kev":16},{"version":129,"cve_count":130,"kev_count":11,"has_kev":16},{"version":132,"cve_count":130,"kev_count":11,"has_kev":16},{"version":134,"cve_count":130,"kev_count":11,"has_kev":16},{"version":136,"cve_count":137,"kev_count":11,"has_kev":16},{"version":139,"cve_count":140,"kev_count":11,"has_kev":16},{"version":142,"cve_count":143,"kev_count":11,"has_kev":16},{"version":145,"cve_count":143,"kev_count":11,"has_kev":16},{"version":147,"cve_count":143,"kev_count":11,"has_kev":16},{"version":149,"cve_count":137,"kev_count":11,"has_kev":16},{"version":151,"cve_count":143,"kev_count":11,"has_kev":16},{"version":153,"cve_count":11,"kev_count":11,"has_kev":16},{"version":155,"cve_count":143,"kev_count":11,"has_kev":16},{"version":157,"cve_count":158,"kev_count":11,"has_kev":16},{"version":160,"cve_count":158,"kev_count":11,"has_kev":16},{"version":162,"cve_count":25,"kev_count":11,"has_kev":16},{"version":164,"cve_count":25,"kev_count":11,"has_kev":16},{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},{"version":170,"cve_count":137,"kev_count":11,"has_kev":16},[249,257,265,271,276,281,287,293,299,304],{"cveId":250,"description":251,"publishedDate":252,"cvssScore":253,"cvssVersion":254,"severity":255,"isKev":16,"epssScore":256},"CVE-2015-1863","Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.","2015-04-28",5.8,"v2","Medium",0.05191,{"cveId":258,"description":259,"publishedDate":260,"cvssScore":261,"cvssVersion":262,"severity":263,"isKev":16,"epssScore":264},"CVE-2019-9497","The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.","2019-04-17",8.1,"v3.0","High",0.04989,{"cveId":266,"description":267,"publishedDate":268,"cvssScore":269,"cvssVersion":254,"severity":255,"isKev":16,"epssScore":270},"CVE-2014-3686","wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.","2014-10-16",6.8,0.04945,{"cveId":272,"description":273,"publishedDate":260,"cvssScore":274,"cvssVersion":262,"severity":263,"isKev":16,"epssScore":275},"CVE-2019-9496","An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd\u002FAP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd process to terminate, performing a denial of service attack. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",7.5,0.04669,{"cveId":277,"description":278,"publishedDate":279,"cvssScore":261,"cvssVersion":262,"severity":263,"isKev":16,"epssScore":280},"CVE-2017-13082","Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.","2017-10-17",0.04575,{"cveId":282,"description":283,"publishedDate":284,"cvssScore":285,"cvssVersion":254,"severity":255,"isKev":16,"epssScore":286},"CVE-2015-4142","Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME\u002FSME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.","2015-06-15",4.3,0.04168,{"cveId":288,"description":289,"publishedDate":260,"cvssScore":290,"cvssVersion":291,"severity":255,"isKev":16,"epssScore":292},"CVE-2019-9494","The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",5.9,"v3.1",0.03878,{"cveId":294,"description":295,"publishedDate":260,"cvssScore":296,"cvssVersion":291,"severity":297,"isKev":16,"epssScore":298},"CVE-2019-9495","The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd\u002Fwpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",3.7,"Low",0.03477,{"cveId":300,"description":301,"publishedDate":284,"cvssScore":302,"cvssVersion":254,"severity":255,"isKev":16,"epssScore":303},"CVE-2015-4143","The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.",5,0.0347,{"cveId":305,"description":306,"publishedDate":284,"cvssScore":302,"cvssVersion":254,"severity":255,"isKev":16,"epssScore":307},"CVE-2015-4146","The EAP-pwd peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 does not clear the L (Length) and M (More) flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service (crash) via a crafted message.",0.03455,[],{"title":310,"metaDescription":311,"keywords":312,"structuredData":313},"Wpa Supplicant by W1.fi - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Wpa Supplicant by W1.fi covering 75 versions with 39 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Wpa Supplicant vulnerabilities, Wpa Supplicant security, Wpa Supplicant CVE, W1.fi Wpa Supplicant, Wpa Supplicant threat intelligence, W1.fi security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":314,"@type":315,"name":316,"description":311,"url":317,"manufacturer":318,"applicationCategory":322,"softwareVersion":323,"mainEntity":324},"https:\u002F\u002Fschema.org","SoftwareApplication","Wpa Supplicant","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fw1.fi\u002Fwpa_supplicant",{"@type":319,"name":320,"url":321},"Organization","W1.fi","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fw1.fi","Security Software","75 versions tracked",{"@type":325,"name":326,"description":327,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Wpa Supplicant Security Vulnerabilities","Security vulnerabilities affecting Wpa Supplicant by W1.fi",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":329,"apiVersion":330},"2026-10-17T19:32:32.163Z","3.0",{"rows":332,"total":11,"capped":16,"failed":11},[],[]]