[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBBtJqazIFS0zunKSQBxnpjJbiJoECFJtl2PGutmg2YM":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":89,"topProductsByCves":90,"seoMetadata":93,"meta":102},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":27},34169,"w1.fi",2,49,0,143,"2025-03-12","w",[16,21],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},169373,"hostapd",68,40,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},169374,"wpa_supplicant",75,39,"2024-08-07","W1.fi is a technology vendor with 2 tracked products and 49 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[29,38,46,53,59,63,68,74,79,84],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":36,"epssScore":37},"CVE-2020-12695","The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.","2020-06-08",7.5,"v3.1","High",false,0.15193,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":36,"epssScore":45},"CVE-2015-1863","Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries.","2015-04-28",5.8,"v2","Medium",0.05191,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":35,"isKev":36,"epssScore":52},"CVE-2019-9497","The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.","2019-04-17",8.1,"v3.0",0.04989,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":43,"severity":44,"isKev":36,"epssScore":58},"CVE-2014-3686","wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.","2014-10-16",6.8,0.04945,{"cveId":60,"description":61,"publishedDate":49,"cvssScore":33,"cvssVersion":51,"severity":35,"isKev":36,"epssScore":62},"CVE-2019-9496","An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd\u002FAP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd process to terminate, performing a denial of service attack. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",0.04669,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":50,"cvssVersion":51,"severity":35,"isKev":36,"epssScore":67},"CVE-2017-13082","Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.","2017-10-17",0.04575,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":43,"severity":44,"isKev":36,"epssScore":73},"CVE-2012-4445","Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service (crash or abort) via a small \"TLS Message Length\" value in an EAP-TLS message with the \"More Fragments\" flag set.","2012-10-10",4.3,0.0422,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":72,"cvssVersion":43,"severity":44,"isKev":36,"epssScore":78},"CVE-2015-4142","Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME\u002FSME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.","2015-06-15",0.04168,{"cveId":80,"description":81,"publishedDate":49,"cvssScore":82,"cvssVersion":34,"severity":44,"isKev":36,"epssScore":83},"CVE-2019-9494","The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",5.9,0.03878,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":36,"epssScore":88},"CVE-2019-10064","hostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library functions without any preceding srand() or srandom() call, which results in inappropriate use of deterministic values. This was fixed in conjunction with CVE-2016-10743.","2020-02-28",0.03842,[],[91,92],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"title":94,"metaDescription":95,"keywords":96,"structuredData":97},"W1.fi - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for W1.fi covering 2 products with 49 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","W1.fi vulnerabilities, W1.fi security, W1.fi CVE, W1.fi threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":98,"@type":99,"name":100,"description":95,"url":101},"https:\u002F\u002Fschema.org","Organization","W1.fi","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fw1.fi",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":103,"apiVersion":104},"2026-10-17T19:32:34.996Z","3.0"]