[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0S40PNsKGdRf1yFf_SE-xz23M6f-3AfMUKnHaOY37sw":3,"g5a-risk:CVE-2019-9498":279},{"success":4,"data":5,"meta":277},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":93,"references":94,"referencesCount":133,"weaknesses":134,"weaknessesCount":147,"isActivelyExploited":148,"cisaInfo":25,"otxData":25,"relatedBlogPosts":149,"seoMetadata":150,"configurations":175,"relatedVendorCves":275,"notableEvents":276},"CVE-2019-9498","What is CVE-2019-9498?","The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar\u002Felement values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.","The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate t...","2019-04-17T14:29:04.01","2023-11-07T03:13:41.157",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02215,[38,38,38,38,38,38,38],"High",[42,47,50,55,58,61,66,70,75,80,84,87,90],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"w1.fi","hostapd","*","cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":45,"criteria":49,"vulnerable":4},"wpa_supplicant","cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"fedoraproject","fedora","28","cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":59,"criteria":60,"vulnerable":4},"30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"opensuse","backports_sle","15.0","cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*",{"vendor":62,"product":67,"version":68,"criteria":69,"vulnerable":4},"leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":73,"criteria":74,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":78,"criteria":79,"vulnerable":4},"synology","radius_server","3.0","cpe:2.3:a:synology:radius_server:3.0:*:*:*:*:*:*:*",{"vendor":76,"product":81,"version":82,"criteria":83,"vulnerable":4},"router_manager","1.2","cpe:2.3:a:synology:router_manager:1.2:*:*:*:*:*:*:*",{"vendor":85,"product":85,"version":45,"criteria":86,"vulnerable":4},"freebsd","cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",{"vendor":85,"product":85,"version":88,"criteria":89,"vulnerable":4},"11.2","cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*",{"vendor":85,"product":85,"version":91,"criteria":92,"vulnerable":4},"12.0","cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*",13,[95,101,105,109,112,115,119,123,129],{"url":96,"source":97,"tags":98},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-02\u002Fmsg00021.html","Opensuse",[99,100],"Mailing List","Third Party Advisory",{"url":102,"source":103,"tags":104},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F07\u002Fmsg00030.html","Debian",[99,100],{"url":106,"source":107,"tags":108},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE\u002F","Fedoraproject",[],{"url":110,"source":107,"tags":111},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FSVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3\u002F",[],{"url":113,"source":107,"tags":114},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ\u002F",[],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FMay\u002F40","Seclists",[99,100],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fsecurity.FreeBSD.org\u002Fadvisories\u002FFreeBSD-SA-19:03.wpa.asc","Freebsd",[100],{"url":124,"source":125,"tags":126},"https:\u002F\u002Fw1.fi\u002Fsecurity\u002F2019-4\u002F","W1",[127,128],"Patch","Vendor Advisory",{"url":130,"source":131,"tags":132},"https:\u002F\u002Fwww.synology.com\u002Fsecurity\u002Fadvisory\u002FSynology_SA_19_16","Synology",[100],9,[135,143],{"id":136,"name":137,"description":138,"extendedDescription":139,"status":140,"abstraction":141,"structure":142},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":144,"name":145,"description":146,"extendedDescription":139,"status":140,"abstraction":141,"structure":142},"CWE-346","Origin Validation Error","The product does not properly verify that the source of data or communication is valid.",2,false,[],{"title":151,"metaDescription":152,"keywords":153,"canonicalUrl":154,"structuredData":155},"What is CVE-2019-9498? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-9498, a high severity cyber security vulnerability from 2019. The implementations of EAP-PWD in hostapd EAP Server, when b...","CVE-2019-9498, CVE-2019-9498 vulnerability, CVE-2019-9498 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, w1.fi security, fedoraproject security, opensuse security, debian security, synology security, hostapd vulnerability, wpa_supplicant vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2019-9498",{"@context":156,"@type":157,"headline":151,"description":152,"datePublished":10,"dateModified":11,"author":158,"publisher":162,"about":166,"mainEntityOfPage":170,"articleSection":173,"keywords":174},"https:\u002F\u002Fschema.org","TechArticle",{"@type":159,"name":160,"url":161},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":159,"name":160,"url":161,"logo":163},{"@type":164,"url":165},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":167,"name":6,"description":168,"additionalType":169},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":171,"@id":172},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-9498","Cybersecurity","CVE-2019-9498, CVE-2019-9498 vulnerability, CVE-2019-9498 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[176,192,202,213,219,227],{"Operator":25,"Negate":25,"Nodes":177},[178],{"Operator":179,"Negate":25,"CPEMatch":180},"OR",[181,184,188,190],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":182,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":183},"552340BD-4450-4767-BDB3-44FF526BD4ED","2.4",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":185,"VersionStartExcluding":25,"VersionStartIncluding":186,"VersionEndExcluding":25,"VersionEndIncluding":187},"2A9FD3E6-61E9-4F50-8077-DDC07F2CC46D","2.5","2.7",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":189,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":183},"068DF041-070A-4483-98A7-3FA2E245344F",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":191,"VersionStartExcluding":25,"VersionStartIncluding":186,"VersionEndExcluding":25,"VersionEndIncluding":187},"922FB3CB-715B-425D-A5DA-E6A50E6D174F",{"Operator":25,"Negate":25,"Nodes":193},[194],{"Operator":179,"Negate":25,"CPEMatch":195},[196,198,200],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":197,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":199,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D100F7CE-FC64-4CC6-852A-6136D72DA419",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":201,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",{"Operator":25,"Negate":25,"Nodes":203},[204],{"Operator":179,"Negate":25,"CPEMatch":205},[206,208,211],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":207,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D83DA865-E4A6-4FBF-AA1B-A969EBA6B2AD",{"Vulnerable":4,"Criteria":209,"MatchCriteriaID":210,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*","40513095-7E6E-46B3-B604-C926F1BA3568",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":212,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Operator":25,"Negate":25,"Nodes":214},[215],{"Operator":179,"Negate":25,"CPEMatch":216},[217],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":218,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":25,"Negate":25,"Nodes":220},[221],{"Operator":179,"Negate":25,"CPEMatch":222},[223,225],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":224,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"2C6E6871-7BB3-43BB-9A31-0B44B46C8D97",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":226,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"85F6D2BF-23EA-4D44-8126-64EA85184D38",{"Operator":25,"Negate":25,"Nodes":228},[229],{"Operator":179,"Negate":25,"CPEMatch":230},[231,235,237,240,243,246,249,252,255,258,261,264,266,269,272],{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":232,"VersionStartExcluding":25,"VersionStartIncluding":233,"VersionEndExcluding":25,"VersionEndIncluding":234},"A89C04C1-3DAF-4490-9045-7E18323B04E4","11.0","11.1",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":236,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"3ACD1D8D-B3BC-4E99-B846-90A4071DB87B",{"Vulnerable":4,"Criteria":238,"MatchCriteriaID":239,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p13:*:*:*:*:*:*","34134EDA-127A-48E2-B630-94DEF14666A9",{"Vulnerable":4,"Criteria":241,"MatchCriteriaID":242,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*","699FE432-8DF0-49F1-A98B-0E19CE01E5CE",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*","20B06752-39EE-4600-AC1F-69FB9C88E2A8",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*","22365F7C-2B00-4B61-84E8-EFBA3B8CFDC0",{"Vulnerable":4,"Criteria":250,"MatchCriteriaID":251,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*","E86CD544-86C4-4D9D-9CE5-087027509EDA",{"Vulnerable":4,"Criteria":253,"MatchCriteriaID":254,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*","64E47AE7-BB45-428E-90E9-38BFDFF23650",{"Vulnerable":4,"Criteria":256,"MatchCriteriaID":257,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*","586B9FA3-65A2-41EB-A848-E4A75565F0CA",{"Vulnerable":4,"Criteria":259,"MatchCriteriaID":260,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p8:*:*:*:*:*:*","1164B48E-2F28-43C5-9B7B-546EAE12E27D",{"Vulnerable":4,"Criteria":262,"MatchCriteriaID":263,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*","F0B15B89-3AD2-4E03-9F47-DA934702187B",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":265,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"826B53C2-517F-4FC6-92E8-E7FCB24F91B4",{"Vulnerable":4,"Criteria":267,"MatchCriteriaID":268,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*","93F10A46-AEF2-4FDD-92D6-0CF07B70F986",{"Vulnerable":4,"Criteria":270,"MatchCriteriaID":271,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*","E1AD57A9-F53A-4E40-966E-F2F50852C5E4",{"Vulnerable":4,"Criteria":273,"MatchCriteriaID":274,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*","C4029113-130F-4A33-A8A0-BC3E74000378",[],[],{"lastModified":11,"cacheTime":278,"version":31},1792367822782,{"score":280,"band":281,"action":282,"scoredAt":283},46,"Medium","Plan remediation","2026-10-16T06:46:00.174377+00:00"]