CVE-2011-5053
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is...
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.
Exploit likelihood
What each source reports
NVD Score used
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.
- Record
CVE-2011-5053- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.
- Record
CVE-2011-5053- Updated
- 2026-11-02
EUVDEUVD-2011-4956 No score
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.
- Record
EUVD-2011-4956- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qm3r-59g5-w8vh No score
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is...
The Wi-Fi Protected Setup (WPS) protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or reconfigure an access point, by reading EAP-NACK messages.
- Record
GHSA-qm3r-59g5-w8vh- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Reaver - WiFi Protected Setup (WPS) | 2011-12-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-5053 is a medium vulnerability (CVSS 5.8) in Wi-fi Wifi Protected Setup Protocol, published January 6, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.27%, the 88th percentile. No source names a fixed version.
References
code.google.com/p/reaver-wps
sviehb.wordpress.com/2011/12/27/wi-fi-protected-setup-pin-brute-force-vulnerability
sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf
kb.cert.org/vuls/id/723755
us-cert.gov/cas/techalerts/TA12-006A.html
tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20120111-wps
nvd.nist.gov/vuln/detail/CVE-2011-5053
github.com/advisories/GHSA-qm3r-59g5-w8vh