{"id":"CVE-2023-52161","aliases":["AZL-43933","AZL-44235","DEBIAN-CVE-2023-52161","DLA-3738-1","DSA-5631-1","EUVD-2023-56834","GHSA-22f2-7248-9pxp","UBUNTU-CVE-2023-52161"],"status":"published","title":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD)...","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01103,"percentile":0.66158,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2024-02-22T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:12","package":"iwd","fixed_in":["2.3-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"iwd","fixed_in":["2.14-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"iwd","fixed_in":["2.14-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"iwd","fixed_in":["0.14-2+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"iwd","fixed_in":["1.14-3+deb11u1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.22-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.22-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3-1+deb12u1"}]}],"versions":["2.3-1"]},{"source":"osv","ecosystem":"Debian:13","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-2+deb10u1"}]}],"versions":["0.14-2"]},{"source":"osv","ecosystem":"Debian:11","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14-3+deb11u1"}]}],"versions":["1.14-3"]},{"source":"osv","ecosystem":"Debian:12","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3-1+deb12u1"}]}],"versions":["2.3-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.21-1","0.23-1","1.0-1","1.1-1","1.2-1","1.2-2","1.4-1","1.5-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15-1","1.21-3","1.24-1build1","1.24-2","1.26-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"iwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8-1ubuntu1","2.13-1ubuntu1","2.14-1ubuntu1","2.14-1ubuntu2","2.14-1ubuntu3"]}],"products":[{"vendor":"intel","product":"inet_wireless_daemon"}],"references":[{"url":"https://iwd.wiki.kernel.org/","tags":["x_transferred","Product","web"]},{"url":"https://www.top10vpn.com/research/wifi-vulnerabilities/","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://git.kernel.org/pub/scm/network/wireless/iwd.git/commit/?id=6415420f1c92012f64063c131480ffcef58e60ca","tags":["x_transferred","Patch","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KSGT4IZ23CJBOQA3AFYEMBJ5OHFZBMK/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOQ6VEE3CPJAQLMMGMLCYDGWHVG7UCJI/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYRPQ3OLV3GGLUCDYWBHU34DLBLM62XJ/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FOQ6VEE3CPJAQLMMGMLCYDGWHVG7UCJI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4KSGT4IZ23CJBOQA3AFYEMBJ5OHFZBMK/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A/","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/02/msg00008.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52161","tags":["web"]},{"url":"https://iwd.wiki.kernel.org"},{"url":"https://www.top10vpn.com/research/wifi-vulnerabilities"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KSGT4IZ23CJBOQA3AFYEMBJ5OHFZBMK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYRPQ3OLV3GGLUCDYWBHU34DLBLM62XJ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOQ6VEE3CPJAQLMMGMLCYDGWHVG7UCJI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4KSGT4IZ23CJBOQA3AFYEMBJ5OHFZBMK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FOQ6VEE3CPJAQLMMGMLCYDGWHVG7UCJI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZTPXEPTMASG37NDGAQMH2OTM6OPIP5A"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TL2CFNWBL2E6AT2SIY2PR3IAWVCDYJZQ"},{"url":"https://github.com/advisories/GHSA-22f2-7248-9pxp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-52161","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-52161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52161","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-52161","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T00:00:00Z","modified":"2025-11-04T22:05:31.145Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:35:18.508816Z"}],"euvd":[{"id":"EUVD-2023-56834","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T00:00:00Z","modified":"2025-11-04T22:05:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T19:49:20.707326Z"}],"ghsa":[{"id":"GHSA-22f2-7248-9pxp","title":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD)...","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T18:30:28Z","modified":"2025-11-05T00:32:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:39.50413Z"}],"nvd":[{"id":"CVE-2023-52161","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T17:15:08.327Z","modified":"2026-06-17T06:42:12.373Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:09:07.077422Z"}],"osv":[{"id":"AZL-43933","title":"CVE-2023-52161 affecting package iwd 1.22-2","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T17:15:08Z","modified":"2026-04-21T04:31:13.030382Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44235","title":"CVE-2023-52161 affecting package iwd 1.22-2","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T17:15:08Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"CVE-2023-52161","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T17:15:08.327Z","modified":"2026-03-15T22:47:50.202788Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-52161","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T17:15:08.327Z","modified":"2026-10-26T18:03:07.485491574Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"UBUNTU-CVE-2023-52161","description":"The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key.","status":"published","published":"2024-02-22T17:15:00Z","modified":"2025-10-24T05:02:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"DLA-3738-1","title":"iwd - security update","status":"published","published":"2024-02-22T00:00:00Z","modified":"2026-03-09T01:23:07.824039Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5631-1","title":"iwd - security update","status":"published","published":"2024-02-25T00:00:00Z","modified":"2026-03-09T02:08:40.736725Z","updated_at":"2026-11-02T15:46:17.892347Z"}]}}