{"id":"CVE-2022-37660","aliases":["CLSA-2026-1781274016","DEBIAN-CVE-2022-37660","DLA-4123-1","EUVD-2022-40274","GHSA-hmq6-3hm7-3h78","UBUNTU-CVE-2022-37660","USN-7317-1","openSUSE-SU-2026:12398-1"],"status":"published","title":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX...","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00378,"percentile":0.32056,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-323"],"published":"2025-02-11T00:00:00Z","modified":"2026-11-04T17:27:19Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd","fixed_in":["2.10-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd-logwatch","fixed_in":["2.10-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wpa","fixed_in":["2:2.10-12+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpa","fixed_in":["2:2.10-24"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpa","fixed_in":["2:2.10-24"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"wpa","fixed_in":["2:2.9-1ubuntu4.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"wpa","fixed_in":["2:2.10-6ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"wpa","fixed_in":["2:2.10-21ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd-logwatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-12+deb12u3"}]}],"versions":["2:2.10-12","2:2.10-12+deb12u1","2:2.10-12+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-24"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-24"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9.0-21+deb11u3"}]}],"versions":["2:2.9.0-21","2:2.9.0-21+deb11u1","2:2.9.0-21+deb11u2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9-1ubuntu4.6"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1","2:2.9-1ubuntu4.2","2:2.9-1ubuntu4.3","2:2.9-1ubuntu4.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-6ubuntu2.2"}]}],"versions":["2:2.9.0-21build1","2:2.9.0-23","2:2.10-1","2:2.10-2","2:2.10-6","2:2.10-6ubuntu1","2:2.10-6ubuntu2","2:2.10-6ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-21ubuntu0.2"}]}],"versions":["2:2.10-15","2:2.10-18","2:2.10-20","2:2.10-21","2:2.10-21build2","2:2.10-21build3","2:2.10-21build4","2:2.10-21ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.9-1ubuntu4.6"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1","2:2.9-1ubuntu4.2","2:2.9-1ubuntu4.3","2:2.9-1ubuntu4.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-6ubuntu2.2"}]}],"versions":["2:2.9.0-21build1","2:2.9.0-23","2:2.10-1","2:2.10-2","2:2.10-6","2:2.10-6ubuntu1","2:2.10-6ubuntu2","2:2.10-6ubuntu2.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-21ubuntu0.2"}]}],"versions":["2:2.10-15","2:2.10-18","2:2.10-20","2:2.10-21","2:2.10-21build2","2:2.10-21build3","2:2.10-21build4","2:2.10-21ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-1.1"}]}],"bundled":3}],"products":[{"vendor":"siemens","product":"sidis secured smartplug"},{"vendor":"w1.fi","product":"hostapd"}],"references":[{"url":"https://w1.fi/cgit/hostap/commit/?id=15af83cf1846870873a011ed4d714732f01cd2e4","tags":["Patch","web","report"]},{"url":"https://link.springer.com/article/10.1007/s10207-025-00988-3","tags":["Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00019.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37660","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hmq6-3hm7-3h78"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1781274016.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37660.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-37660","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-37660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37660","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7317-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-23303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23304","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37660","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-37660","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","status":"published","published":"2025-02-11T00:00:00Z","modified":"2026-07-14T11:54:12.866Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-323"],"updated_at":"2026-11-02T14:34:26.977054Z"}],"euvd":[{"id":"EUVD-2022-40274","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","status":"published","published":"2025-02-11T00:00:00Z","modified":"2026-07-14T11:54:12Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:00.696533Z"}],"ghsa":[{"id":"GHSA-hmq6-3hm7-3h78","title":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX...","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","status":"published","published":"2025-02-12T00:32:16Z","modified":"2026-07-14T12:31:06Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-323"],"updated_at":"2026-11-02T15:09:27.031Z"}],"nvd":[{"id":"CVE-2022-37660","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","status":"published","published":"2025-02-11T23:15:08.14Z","modified":"2026-07-14T12:16:48.013Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-323"],"updated_at":"2026-11-02T14:07:40.977475Z"}],"osv":[{"id":"CVE-2022-37660","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","status":"published","published":"2025-02-11T00:00:00Z","modified":"2026-11-04T17:27:19.576619258Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-04T17:42:25.919377Z"},{"id":"DEBIAN-CVE-2022-37660","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","status":"published","published":"2025-02-11T23:15:08.14Z","modified":"2026-11-03T08:03:54.191529348Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T08:23:34.488036Z"},{"id":"UBUNTU-CVE-2022-37660","description":"In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.","status":"published","published":"2025-02-11T23:15:00Z","modified":"2026-04-22T13:26:47.435704Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"CLSA-2026-1781274016","title":"hostapd: Fix of CVE-2022-37660","description":"- CVE-2022-37660: delete PKEX code and identifier on successful PKEX\n  completion to prevent passive recovery of ephemeral key X","status":"published","published":"2026-06-12T14:20:38Z","modified":"2026-10-26T09:30:22.38921643Z","updated_at":"2026-11-02T15:43:45.445699Z"},{"id":"DLA-4123-1","title":"wpa - security update","status":"published","published":"2025-04-12T00:00:00Z","modified":"2026-03-09T01:19:16.57408Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2026:12398-1","title":"hostapd-2.12-1.1 on GA media","description":"These are all security issues fixed in the hostapd-2.12-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-03T00:00:00Z","modified":"2026-11-04T17:23:21.433326008Z","updated_at":"2026-11-04T17:43:22.558805Z"},{"id":"USN-7317-1","title":"wpa vulnerabilities","description":"George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that\nwpa_supplicant and hostapd reused encryption elements in the PKEX protocol.\nAn attacker could possibly use this issue to impersonate a wireless access\npoint, and obtain sensitive information. (CVE-2022-37660)\n\nDaniel De Almeida Braga, Mohamed Sabt, and Pierre-Alain Fouque discovered\nthat wpa_supplicant and hostapd were vulnerable to side channel attacks due\nto the cache access patterns. An attacker could possibly use this issue to\nobtain sensitive information. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2022-23303, CVE-2022-23304)\n","status":"published","published":"2025-03-03T19:42:04Z","modified":"2026-04-22T10:56:03.802369Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}