[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJ7i6Ta5VHmlKD7FN049aEOyO5b9cxuT9FCRGdauQFmA":3,"g5a-risk:CVE-2019-9499":279},{"success":4,"data":5,"meta":277},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":93,"references":94,"referencesCount":133,"weaknesses":134,"weaknessesCount":147,"isActivelyExploited":148,"cisaInfo":25,"otxData":25,"relatedBlogPosts":149,"seoMetadata":150,"configurations":175,"relatedVendorCves":275,"notableEvents":276},"CVE-2019-9499","What is CVE-2019-9499?","The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.","The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not valid...","2019-04-17T14:29:04.057","2023-11-07T03:13:41.263",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02215,[38,38,38,38,38,38,38],"High",[42,47,50,55,58,61,66,70,75,80,84,87,90],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"w1.fi","hostapd","*","cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":45,"criteria":49,"vulnerable":4},"wpa_supplicant","cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"fedoraproject","fedora","28","cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":59,"criteria":60,"vulnerable":4},"30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"opensuse","backports_sle","15.0","cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*",{"vendor":62,"product":67,"version":68,"criteria":69,"vulnerable":4},"leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":73,"criteria":74,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":78,"criteria":79,"vulnerable":4},"synology","radius_server","3.0","cpe:2.3:a:synology:radius_server:3.0:*:*:*:*:*:*:*",{"vendor":76,"product":81,"version":82,"criteria":83,"vulnerable":4},"router_manager","1.2","cpe:2.3:a:synology:router_manager:1.2:*:*:*:*:*:*:*",{"vendor":85,"product":85,"version":45,"criteria":86,"vulnerable":4},"freebsd","cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",{"vendor":85,"product":85,"version":88,"criteria":89,"vulnerable":4},"11.2","cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*",{"vendor":85,"product":85,"version":91,"criteria":92,"vulnerable":4},"12.0","cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*",13,[95,101,105,109,112,115,119,123,129],{"url":96,"source":97,"tags":98},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-02\u002Fmsg00021.html","Opensuse",[99,100],"Mailing List","Third Party Advisory",{"url":102,"source":103,"tags":104},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F07\u002Fmsg00030.html","Debian",[99,100],{"url":106,"source":107,"tags":108},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE\u002F","Fedoraproject",[],{"url":110,"source":107,"tags":111},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FSVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3\u002F",[],{"url":113,"source":107,"tags":114},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ\u002F",[],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FMay\u002F40","Seclists",[99,100],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fsecurity.FreeBSD.org\u002Fadvisories\u002FFreeBSD-SA-19:03.wpa.asc","Freebsd",[100],{"url":124,"source":125,"tags":126},"https:\u002F\u002Fw1.fi\u002Fsecurity\u002F2019-4\u002F","W1",[127,128],"Patch","Vendor Advisory",{"url":130,"source":131,"tags":132},"https:\u002F\u002Fwww.synology.com\u002Fsecurity\u002Fadvisory\u002FSynology_SA_19_16","Synology",[100],9,[135,143],{"id":136,"name":137,"description":138,"extendedDescription":139,"status":140,"abstraction":141,"structure":142},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":144,"name":145,"description":146,"extendedDescription":139,"status":140,"abstraction":141,"structure":142},"CWE-346","Origin Validation Error","The product does not properly verify that the source of data or communication is valid.",2,false,[],{"title":151,"metaDescription":152,"keywords":153,"canonicalUrl":154,"structuredData":155},"What is CVE-2019-9499? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-9499, a high severity cyber security vulnerability from 2019. The implementations of EAP-PWD in wpa_supplicant EAP Peer, w...","CVE-2019-9499, CVE-2019-9499 vulnerability, CVE-2019-9499 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, w1.fi security, fedoraproject security, opensuse security, debian security, synology security, hostapd vulnerability, wpa_supplicant vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2019-9499",{"@context":156,"@type":157,"headline":151,"description":152,"datePublished":10,"dateModified":11,"author":158,"publisher":162,"about":166,"mainEntityOfPage":170,"articleSection":173,"keywords":174},"https:\u002F\u002Fschema.org","TechArticle",{"@type":159,"name":160,"url":161},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":159,"name":160,"url":161,"logo":163},{"@type":164,"url":165},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":167,"name":6,"description":168,"additionalType":169},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":171,"@id":172},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-9499","Cybersecurity","CVE-2019-9499, CVE-2019-9499 vulnerability, CVE-2019-9499 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[176,192,202,213,219,227],{"Operator":25,"Negate":25,"Nodes":177},[178],{"Operator":179,"Negate":25,"CPEMatch":180},"OR",[181,184,188,190],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":182,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":183},"552340BD-4450-4767-BDB3-44FF526BD4ED","2.4",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":185,"VersionStartExcluding":25,"VersionStartIncluding":186,"VersionEndExcluding":25,"VersionEndIncluding":187},"2A9FD3E6-61E9-4F50-8077-DDC07F2CC46D","2.5","2.7",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":189,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":183},"068DF041-070A-4483-98A7-3FA2E245344F",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":191,"VersionStartExcluding":25,"VersionStartIncluding":186,"VersionEndExcluding":25,"VersionEndIncluding":187},"922FB3CB-715B-425D-A5DA-E6A50E6D174F",{"Operator":25,"Negate":25,"Nodes":193},[194],{"Operator":179,"Negate":25,"CPEMatch":195},[196,198,200],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":197,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":199,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D100F7CE-FC64-4CC6-852A-6136D72DA419",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":201,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",{"Operator":25,"Negate":25,"Nodes":203},[204],{"Operator":179,"Negate":25,"CPEMatch":205},[206,208,211],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":207,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D83DA865-E4A6-4FBF-AA1B-A969EBA6B2AD",{"Vulnerable":4,"Criteria":209,"MatchCriteriaID":210,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*","40513095-7E6E-46B3-B604-C926F1BA3568",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":212,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Operator":25,"Negate":25,"Nodes":214},[215],{"Operator":179,"Negate":25,"CPEMatch":216},[217],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":218,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":25,"Negate":25,"Nodes":220},[221],{"Operator":179,"Negate":25,"CPEMatch":222},[223,225],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":224,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"2C6E6871-7BB3-43BB-9A31-0B44B46C8D97",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":226,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"85F6D2BF-23EA-4D44-8126-64EA85184D38",{"Operator":25,"Negate":25,"Nodes":228},[229],{"Operator":179,"Negate":25,"CPEMatch":230},[231,235,237,240,243,246,249,252,255,258,261,264,266,269,272],{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":232,"VersionStartExcluding":25,"VersionStartIncluding":233,"VersionEndExcluding":25,"VersionEndIncluding":234},"A89C04C1-3DAF-4490-9045-7E18323B04E4","11.0","11.1",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":236,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"3ACD1D8D-B3BC-4E99-B846-90A4071DB87B",{"Vulnerable":4,"Criteria":238,"MatchCriteriaID":239,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p13:*:*:*:*:*:*","34134EDA-127A-48E2-B630-94DEF14666A9",{"Vulnerable":4,"Criteria":241,"MatchCriteriaID":242,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*","699FE432-8DF0-49F1-A98B-0E19CE01E5CE",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*","20B06752-39EE-4600-AC1F-69FB9C88E2A8",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*","22365F7C-2B00-4B61-84E8-EFBA3B8CFDC0",{"Vulnerable":4,"Criteria":250,"MatchCriteriaID":251,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*","E86CD544-86C4-4D9D-9CE5-087027509EDA",{"Vulnerable":4,"Criteria":253,"MatchCriteriaID":254,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*","64E47AE7-BB45-428E-90E9-38BFDFF23650",{"Vulnerable":4,"Criteria":256,"MatchCriteriaID":257,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*","586B9FA3-65A2-41EB-A848-E4A75565F0CA",{"Vulnerable":4,"Criteria":259,"MatchCriteriaID":260,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p8:*:*:*:*:*:*","1164B48E-2F28-43C5-9B7B-546EAE12E27D",{"Vulnerable":4,"Criteria":262,"MatchCriteriaID":263,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*","F0B15B89-3AD2-4E03-9F47-DA934702187B",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":265,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"826B53C2-517F-4FC6-92E8-E7FCB24F91B4",{"Vulnerable":4,"Criteria":267,"MatchCriteriaID":268,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*","93F10A46-AEF2-4FDD-92D6-0CF07B70F986",{"Vulnerable":4,"Criteria":270,"MatchCriteriaID":271,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*","E1AD57A9-F53A-4E40-966E-F2F50852C5E4",{"Vulnerable":4,"Criteria":273,"MatchCriteriaID":274,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*","C4029113-130F-4A33-A8A0-BC3E74000378",[],[],{"lastModified":11,"cacheTime":278,"version":31},1792372479224,{"score":280,"band":281,"action":282,"scoredAt":283},46,"Medium","Plan remediation","2026-10-16T06:46:00.174901+00:00"]