[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZ78lSFBwi4BkqzuphKEOFkCqVTSgEDK7t_zFsE9B75M":3,"g5a-risk:CVE-2019-9496":167},{"success":4,"data":5,"meta":165},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":35,"references":62,"referencesCount":99,"weaknesses":100,"weaknessesCount":114,"isActivelyExploited":115,"cisaInfo":15,"otxData":15,"relatedBlogPosts":116,"seoMetadata":117,"configurations":142,"relatedVendorCves":163,"notableEvents":164},"CVE-2019-9496","What is CVE-2019-9496?","An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm message when in hostapd\u002FAP mode. All version of hostapd with SAE support are vulnerable. An attacker may force the hostapd process to terminate, performing a denial of service attack. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.","An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps when processing the SAE confirm mess...","2019-04-17T14:29:03.917","2023-11-07T03:13:40.953",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.04669,[39,39,39,39,39,39,39],"High",[43,48,51,56,59],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"w1.fi","hostapd","*","cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"wpa_supplicant","cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"fedoraproject","fedora","28","cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":60,"criteria":61,"vulnerable":4},"30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",[63,67,71,75,78,81,85,89,95],{"url":64,"source":65,"tags":66},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-02\u002Fmsg00021.html","Opensuse",[],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152914\u002FFreeBSD-Security-Advisory-FreeBSD-SA-19-03.wpa.html","Packetstormsecurity",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE\u002F","Fedoraproject",[],{"url":76,"source":73,"tags":77},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FSVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3\u002F",[],{"url":79,"source":73,"tags":80},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ\u002F",[],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FMay\u002F40","Seclists",[],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fsecurity.FreeBSD.org\u002Fadvisories\u002FFreeBSD-SA-19:03.wpa.asc","Freebsd",[],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fw1.fi\u002Fsecurity\u002F2019-3\u002F","W1",[93,94],"Patch","Vendor Advisory",{"url":96,"source":97,"tags":98},"https:\u002F\u002Fwww.synology.com\u002Fsecurity\u002Fadvisory\u002FSynology_SA_19_16","Synology",[],9,[101,109],{"id":102,"name":103,"description":104,"extendedDescription":105,"status":106,"abstraction":107,"structure":108},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":110,"name":111,"description":112,"extendedDescription":113,"status":106,"abstraction":107,"structure":108},"CWE-642","External Control of Critical State Data","The product stores security-critical state information about its users, or the product itself, in a location that is accessible to unauthorized actors.","If an attacker can modify the state information without detection, then it could be used to perform unauthorized actions or access unexpected resources, since the application programmer does not expect that the state can be changed.\nState information can be stored in various locations such as a cookie, in a hidden web form field, input parameter or argument, an environment variable, a database record, within a settings file, etc. All of these locations have the potential to be modified by an attacker. When this state information is used to control security or determine resource usage, then it may create a vulnerability. For example, an application may perform authentication, then save the state in an \"authenticated=true\" cookie. An attacker may simply create this cookie in order to bypass the authentication.",2,false,[],{"title":118,"metaDescription":119,"keywords":120,"canonicalUrl":121,"structuredData":122},"What is CVE-2019-9496? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-9496, a high severity cyber security vulnerability from 2019. An invalid authentication sequence could result in the hosta...","CVE-2019-9496, CVE-2019-9496 vulnerability, CVE-2019-9496 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, w1.fi security, fedoraproject security, hostapd vulnerability, wpa_supplicant vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2019-9496",{"@context":123,"@type":124,"headline":118,"description":119,"datePublished":10,"dateModified":11,"author":125,"publisher":129,"about":133,"mainEntityOfPage":137,"articleSection":140,"keywords":141},"https:\u002F\u002Fschema.org","TechArticle",{"@type":126,"name":127,"url":128},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":126,"name":127,"url":128,"logo":130},{"@type":131,"url":132},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":134,"name":6,"description":135,"additionalType":136},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":138,"@id":139},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-9496","Cybersecurity","CVE-2019-9496, CVE-2019-9496 vulnerability, CVE-2019-9496 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[143,153],{"Operator":15,"Negate":15,"Nodes":144},[145],{"Operator":146,"Negate":15,"CPEMatch":147},"OR",[148,151],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":149,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":150},"5133129D-DA6B-485D-9FE7-33C994FBAF05","2.7",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":152,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":150},"46294B0E-0043-487D-AD8F-931DC05F0E78",{"Operator":15,"Negate":15,"Nodes":154},[155],{"Operator":146,"Negate":15,"CPEMatch":156},[157,159,161],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D100F7CE-FC64-4CC6-852A-6136D72DA419",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",[],[],{"lastModified":11,"cacheTime":166,"version":32},1792266163510,{"score":168,"band":169,"action":170,"scoredAt":171},48,"Medium","Plan remediation","2026-10-16T06:46:00.17327+00:00"]