{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "the Katholieke Universiteit Leuven in Belgium",
        "summary": "discovering these vulnerabilities"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "summary",
        "text": "Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.",
        "title": "Summary"
      },
      {
        "category": "other",
        "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "CISAservicedesk@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-318-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-318-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-318-01 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-01"
      }
    ],
    "title": "ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)",
    "tracking": {
      "current_release_date": "2019-04-09T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA USCert CSAF Generator",
          "version": "1"
        }
      },
      "id": "ICSA-17-318-01",
      "initial_release_date": "2017-11-14T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-11-14T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products"
        },
        {
          "date": "2017-12-05T00:00:00.000000Z",
          "legacy_version": "A",
          "number": "2",
          "summary": "ICSA-17-318-01A Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update A)"
        },
        {
          "date": "2017-12-19T00:00:00.000000Z",
          "legacy_version": "B",
          "number": "3",
          "summary": "ICSA-17-318-01B Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update B)"
        },
        {
          "date": "2018-01-25T00:00:00.000000Z",
          "legacy_version": "C",
          "number": "4",
          "summary": "ICSA-17-318-01C Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update C)"
        },
        {
          "date": "2018-04-24T00:00:00.000000Z",
          "legacy_version": "D",
          "number": "5",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update D)"
        },
        {
          "date": "2018-11-13T00:00:00.000000Z",
          "legacy_version": "E",
          "number": "6",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update E)"
        },
        {
          "date": "2019-04-09T00:00:00.000000Z",
          "legacy_version": "F",
          "number": "7",
          "summary": "ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)"
        }
      ],
      "status": "final",
      "version": "7"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 22.3.5.16",
                "product": {
                  "name": "SIMATIC RF650M: All versions with Summit Client Utility prior to v22.3.5.16",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF650M"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SCALANCE W-700 (IEEE 802.11a/b/g): All versions",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W-700 (IEEE 802.11a/b/g)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC Mobile Panel 277(F) IWLAN: All versions",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Mobile Panel 277(F) IWLAN"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "RUGGEDCOM RS9xxW: All versions",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RS9xxW"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 22.3.5.16",
                "product": {
                  "name": "SIMATIC RF350M: All versions with Summit Client Utility prior to v22.3.5.16",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC RF350M"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 01.03.01",
                "product": {
                  "name": "SINAMICS v20 Smart Access Module: All versions prior to v01.03.01",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "SINAMICS v20 Smart Access Module"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 9.21.19.003",
                "product": {
                  "name": "SCALANCE WLC712: All versions prior to v9.21.19.003",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE WLC712"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 6.2.1",
                "product": {
                  "name": "SCALANCE W-700 (IEEE 802.11n): All versions prior to v6.2.1",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W-700 (IEEE 802.11n)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 6.5.1.5-4.3.1.8",
                "product": {
                  "name": "SCALANCE W1750D: All versions prior to v6.5.1.5-4.3.1.8",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE W1750D"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 2.11.2",
                "product": {
                  "name": "RUGGEDCOM RX1400 with WLAN interface: All versions prior to v2.11.2",
                  "product_id": "CSAFPID-00010"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM RX1400 with WLAN interface"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IWLAN-PB/LINK: All versions",
                  "product_id": "CSAFPID-00011"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IWLAN-PB/LINK"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c 9.21.19.003",
                "product": {
                  "name": "SCALANCE WLC711: All versions prior to v9.21.19.003",
                  "product_id": "CSAFPID-00012"
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE WLC711"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN: All versions",
                  "product_id": "CSAFPID-00013"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC ET200 PRO IM154-6 PN IWLAN"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the pairwise key in the four-way handshake.CVE-2017-13077 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13078 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13079 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the group temporal key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13080 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the integrity group temporal key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.CVE-2017-13081 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the pairwise transient key (PTK) temporal key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13082 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13084",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the station-to-station-link (STSL) transient key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13084 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13084"
    },
    {
      "cve": "CVE-2017-13086",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) allows reinstallation of the tunneled direct-link setup (TDLS) peer key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.CVE-2017-13086 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the group temporal key (GTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13087 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "cwe": {
        "id": "CWE-322",
        "name": "Key Exchange without Entity Authentication"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Wi-Fi protected access (WPA and WPA2) that support 802.11v allows reinstallation of the integrity group temporal key (IGTK) when processing a wireless network management (WNM) sleep mode response frame, allowing an attacker within radio range to replay frames from access points to clients.CVE-2017-13088 has been assigned to this vulnerability. A CVSS v3 base score of 4.2 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Contact the RUGGEDCOM support team at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013"
          ]
        }
      ],
      "title": "CVE-2017-13088"
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "the Katholieke Universiteit Leuven in Belgium",
        "summary": "discovering this vulnerability"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Vendor: ABB",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing, Energy",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Switzerland",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to ICS-CERT for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from adjacent networks. High skill level is needed to exploit.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-318-02A JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-318-02a.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-318-02A Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-02a"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-02a"
      }
    ],
    "title": "ABB TropOS (Update A)",
    "tracking": {
      "current_release_date": "2018-02-15T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-17-318-02A",
      "initial_release_date": "2017-11-14T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-11-14T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-318-02 ABB TropOS"
        },
        {
          "date": "2018-02-15T00:00:00.000000Z",
          "legacy_version": "A",
          "number": "2",
          "summary": "ICSA-17-318-02A ABB TropOS (Update A)"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 8.5.2",
                "product": {
                  "name": "TropOS Mesh OS: release 8.5.2 or prior",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "TropOS Mesh OS"
          }
        ],
        "category": "vendor",
        "name": "ABB"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An industry-wide vulnerability exists in the WPA2 key management algorithm devices that use IEEE 802.11w, including the TropOS broadband mesh routers listed above. The vulnerability may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network.The following CVEs have been assigned to this group of vulnerabilities:",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "ABB has released Mesh OS version 8.5.3 to address these vulnerabilities.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "ABB has released an advisory (1KHW02890) on their alerts and notification page:",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW02890\u0026Action=Launch"
        },
        {
          "category": "mitigation",
          "details": "ABB is working on remedial actions for all affected products.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "ABB has released an advisory (1KHW02890) on their alerts and notification page:",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW02890\u0026Action=Launch"
        },
        {
          "category": "mitigation",
          "details": "This advisory will be updated when firmware, including remedial measures, is available.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "The TropOS mesh wireless interfaces are not vulnerable. Wired client interfaces (Ethernet, Serial) are not vulnerable. An attacker must be in physical proximity of the Wi-Fi access point and connected client to be successful. If the communication across the Wi-Fi link is encrypted at Layer 3 (e.g., SSH, SSL, HTTPS, or SNMPv3 encrypted), privacy is maintained during an otherwise successful attack. If possible, encrypt communication across the Wi-Fi link at Layer 3 using SSH, SSL, HTTPS, or SNMPv3. There is no complete workaround which allows protected Wi-Fi access to the TropOS Mesh.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "ABB users with a current Complete Software Care or Complete Software + Hardware Care subscription are advised to contact ABB Wireless support on phone +1(408) 331 6800, ext. 4, or email tropos.support@nam.abb.com.",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "mailto:tropos.support@nam.abb.com"
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "imec-DistriNet",
        "summary": "discovering these vulnerabilities"
      },
      {
        "names": [
          "KU Leuven"
        ],
        "summary": "discovering these vulnerabilities"
      },
      {
        "organization": "PHOENIX CONTACT",
        "summary": "reporting these vulnerabilities to CERT@VDE"
      },
      {
        "organization": "CERT@VDE",
        "summary": "coordinating these vulnerabilities with ICS-CERT"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "ATTENTION: Public exploits are available.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Communications, Critical Manufacturing, Information Technology",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to ICS-CERT for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "These vulnerabilities are not remotely exploitable. High skill level is needed to exploit.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-325-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-325-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-325-01 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-325-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-325-01"
      }
    ],
    "title": "PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol",
    "tracking": {
      "current_release_date": "2017-11-21T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-17-325-01",
      "initial_release_date": "2017-11-21T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-11-21T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-325-01 PHOENIX CONTACT WLAN Capable Devices using the WPA2 Protocol"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN SPA: all versions",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN SPA"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL COMSERVER WLAN 232/422/485: all versions",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "FL COMSERVER WLAN 232/422/485"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "TPC 6013: all versions",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "TPC 6013"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "VMT 30xx: all versions",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "VMT 30xx"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN 24 EC 802-11: all versions",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN 24 EC 802-11"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "BL2 BPC: all versions",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "BL2 BPC"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN 110x: all versions",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN 110x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN 24 DAP 802-11: all versions",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN 24 DAP 802-11"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN EPA: all versions",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN EPA"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "BL2 PPC: all versions",
                  "product_id": "CSAFPID-00010"
                }
              }
            ],
            "category": "product_name",
            "name": "BL2 PPC"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "ITC 8113: all versions",
                  "product_id": "CSAFPID-00011"
                }
              }
            ],
            "category": "product_name",
            "name": "ITC 8113"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "VMT 50xx: all versions",
                  "product_id": "CSAFPID-00012"
                }
              }
            ],
            "category": "product_name",
            "name": "VMT 50xx"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "RAD-80211-XD: all versions",
                  "product_id": "CSAFPID-00013"
                }
              }
            ],
            "category": "product_name",
            "name": "RAD-80211-XD"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN 210x: all versions",
                  "product_id": "CSAFPID-00014"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN 210x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN 24 AP 802-11: all versions",
                  "product_id": "CSAFPID-00015"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN 24 AP 802-11"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "RAD-WHG/WLAN-XD: all versions",
                  "product_id": "CSAFPID-00016"
                }
              }
            ],
            "category": "product_name",
            "name": "RAD-WHG/WLAN-XD"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "VMT 70xx: all versions",
                  "product_id": "CSAFPID-00017"
                }
              }
            ],
            "category": "product_name",
            "name": "VMT 70xx"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN 510x: all versions",
                  "product_id": "CSAFPID-00018"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN 510x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "FL WLAN 230 AP 802-11: all versions",
                  "product_id": "CSAFPID-00019"
                }
              }
            ],
            "category": "product_name",
            "name": "FL WLAN 230 AP 802-11"
          }
        ],
        "category": "vendor",
        "name": "PHOENIX CONTACT, Innominate Security Technologies"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Multiple products are affected by key reinstallation attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames.The following CVEs have been assigned to this group of vulnerabilities:",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012",
          "CSAFPID-00013",
          "CSAFPID-00014",
          "CSAFPID-00015",
          "CSAFPID-00016",
          "CSAFPID-00017",
          "CSAFPID-00018",
          "CSAFPID-00019"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NH"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "PHOENIX CONTACT has reported that users operating embedded devices in AP mode are not affected by these vulnerabilities. PHOENIX CONTACT is actively working on discovering how these vulnerabilities affect its products and plans to release future updates as they become available. For more information, please see the advisory at this location:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019"
          ],
          "url": "https://cert.vde.com/de-de/advisories/vde-2017-003"
        },
        {
          "category": "mitigation",
          "details": "PHOENIX CONTACT recommends that users apply the security update provided by Microsoft at the following location for devices running Microsoft Windows:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019"
          ],
          "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-13080"
        },
        {
          "category": "mitigation",
          "details": "If WPA-TKIP is being used for WLAN configuration, PHOENIX CONTACT recommends the user switch to AES-CCMP immediately.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012",
            "CSAFPID-00013",
            "CSAFPID-00014",
            "CSAFPID-00015",
            "CSAFPID-00016",
            "CSAFPID-00017",
            "CSAFPID-00018",
            "CSAFPID-00019"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "imec-DistriNet",
        "summary": "discovering these vulnerabilities"
      },
      {
        "names": [
          "KU Leuven"
        ],
        "summary": "discovering these vulnerabilities"
      },
      {
        "organization": "PEPPERL+FUCHS",
        "summary": "reporting to CERT@VDE that their products are affected"
      },
      {
        "organization": "CERT@VDE",
        "summary": "coordinating these vulnerabilities with ICS-CERT"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "ATTENTION: Low skill level is needed to exploit. Public exploits are available.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Communications, Critical Manufacturing, Information Technology",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC/ICS-CERT recommends that users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "ICS-CERT reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "ICS-CERT also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS -CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT web site.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-353-02 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2017/icsa-17-353-02.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-17-353-02 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-353-02"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-17-353-02"
      }
    ],
    "title": "PEPPERL+FUCHS/ecom instruments WLAN Capable Devices using the WPA2 Protocol",
    "tracking": {
      "current_release_date": "2017-12-19T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-17-353-02",
      "initial_release_date": "2017-12-19T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2017-12-19T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-17-353-02 PEPPERL+FUCHS, ecom instruments WLAN capable devices using the WPA2 Protocol"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "CK71A-ATEX: All versions",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "CK71A-ATEX"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Smart-Ex 201: All versions",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "Smart-Ex 201"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Ex-Handy 09: All versions",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "Ex-Handy 09"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "CN70E-ATEX: All versions",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "CN70E-ATEX"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "CN70A-ATEX: All versions",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "CN70A-ATEX"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "CK70A-ATEX: All versions",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "CK70A-ATEX"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "i.roc Ci70-Ex: All versions",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "i.roc Ci70-Ex"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Tab-Ex 01: All versions",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "Tab-Ex 01"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Smart-Ex 01: All versions",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "Smart-Ex 01"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Pad-Ex 01: All versions",
                  "product_id": "CSAFPID-00010"
                }
              }
            ],
            "category": "product_name",
            "name": "Pad-Ex 01"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Ex-Handy 209: All versions",
                  "product_id": "CSAFPID-00011"
                }
              }
            ],
            "category": "product_name",
            "name": "Ex-Handy 209"
          }
        ],
        "category": "vendor",
        "name": "PEPPERL+FUCHS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Multiple products are affected by key reinstallation attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames.The following CVEs have been assigned to this group of vulnerabilities:",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Android: Affected Products: Tab-Ex 01, Ex-Handy 09, Ex-Handy 209, Smart-Ex 01, Smart-Ex 201 ecom instruments is actively working on these vulnerabilities. This advisory will updated as soon as further significant details are provided by the vendor, with an emphasis on information about available patches.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011"
          ]
        },
        {
          "category": "mitigation",
          "details": "Windows: Affected Products: Pad-Ex 01, i.roc Ci70-Ex, CK70A-ATEX, CK71A-ATEX, CN70A-ATEX, CN70E-ATEX For ecom instruments devices running Windows, ecom instruments recommends users apply the security update provided by Microsoft. If users are using WPA-TKIP in their WLAN, users should switch to AES-CCMP immediately.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information CERT@VDE has released a security advisory found at:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011"
          ],
          "url": "https://cert.vde.com/de-de/advisories/vde-2017-005"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "imec-DistriNet, KU Leuven",
        "summary": "discovering the KRACK vulnerabilities"
      },
      {
        "names": [
          "BD"
        ],
        "summary": "reporting to NCCIC that the KRACK vulnerabilities may possibly affect these products"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Healthcare and Public Health",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "New Jersey",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS-CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT website.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "These vulnerabilities have been publicly disclosed. These vulnerabilities are exploitable from an adjacent network. High skill level is needed to exploit.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSMA-18-114-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsma-18-114-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSMA-18-114-01 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-114-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-18-114-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      }
    ],
    "title": "BD Pyxis",
    "tracking": {
      "current_release_date": "2018-04-24T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSMA-18-114-01",
      "initial_release_date": "2018-04-24T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2018-04-24T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSMA-18-114-01 BD Pyxis"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia ES,",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis Anesthesia ES"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia System 4000,",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis Anesthesia System 4000"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis Anesthesia System 3500,",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis Anesthesia System 3500"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis MedStation 4000 T2,",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis MedStation 4000 T2"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis MedStation ES,",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis MedStation ES"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis SupplyStation,",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis SupplyStation"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis Supply Roller,",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis SupplyRoller"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis ParAssist System,",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis ParAssist System"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis PARx,",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis PARx"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis CIISafe - Workstation,",
                  "product_id": "CSAFPID-00010"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis CIISafe - Workstation"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis StockStation System, and",
                  "product_id": "CSAFPID-00011"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis StockStation System"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vers:all/*",
                "product": {
                  "name": "Certain BD Pyxis Products - BD Pyxis Parx handheld",
                  "product_id": "CSAFPID-00012"
                }
              }
            ],
            "category": "product_name",
            "name": "BD Pyxis Parx handheld"
          }
        ],
        "category": "vendor",
        "name": "Becton, Dickinson and Company (BD)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An industry-wide vulnerability exists in the WPA and WPA2 protocol affected by the Key Reinstallation Attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames. The following CVEs have been assigned to this group of vulnerabilities: CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.. CVE-2017-13078: Reinstallation of the group key during the four-way handshake. CVE-2017-13078: Reinstallation of the group key during the four-way handshake.. CVE-2017-13079: Reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake.CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-00010",
          "CSAFPID-00011",
          "CSAFPID-00012"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "BD has implemented third-party vendor patches through BD\u0027s routine patch deployment process that resolves these vulnerabilities for most devices. Some devices require coordination with BD. BD is in the process of contacting users to schedule and deploy patches. There is currently no reported verified instance of the KRACK vulnerability being exploited maliciously against BD devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Additionally, BD recommends the following compensating controls in order to reduce risk associated with this vulnerability:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "BD has published a product security bulletin to notify users about this issue and to provide additional mitigation counsel. It can be found at the following location on their web page:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "http://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-for-wpa2-krack-wi-fi-vulnerability",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012"
          ],
          "url": "http://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-for-wpa2-krack-wi-fi-vulnerability"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-00010",
            "CSAFPID-00011",
            "CSAFPID-00012"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Mathy Vanhoef"
        ],
        "organization": "imec-DistriNet",
        "summary": "discovering the KRACK vulnerabilities"
      },
      {
        "organization": "KU Leuven",
        "summary": "discovering the KRACK vulnerabilities"
      },
      {
        "names": [
          "Stryker"
        ],
        "summary": "reporting to NCCIC that the KRACK vulnerabilities may possibly affect these products"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of this vulnerability could allow data traffic manipulation, resulting in partial disclosure of encrypted communication or injection of data.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Healthcare and Public Health",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "United States",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "This vulnerability is exploitable from an adjacent network. High skill level is needed to exploit.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSMA-19-029-01 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsma-19-029-01.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSMA-19-029-01 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-029-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Stryker Medical Beds",
    "tracking": {
      "current_release_date": "2019-01-29T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSMA-19-029-01",
      "initial_release_date": "2019-01-29T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2019-01-29T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSMA-19-029-01 Stryker Medical Beds"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3002 S3 | 3005 S3",
                "product": {
                  "name": "S3 MedSurg Bed (enabled with iBed Wireless): Models 3002 S3 and 3005 S3",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "S3 MedSurg Bed (enabled with iBed Wireless)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3002",
                "product": {
                  "name": "Secure II MedSurg Bed (enabled with iBed Wireless): Model 3002",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "Secure II MedSurg Bed (enabled with iBed Wireless)"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2131 and 2141",
                "product": {
                  "name": "InTouch ICU Bed (enabled with Bed Wireless): Models 2131 and 2141",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "InTouch ICU Bed (enabled with Bed Wireless)"
          }
        ],
        "category": "vendor",
        "name": "Stryker"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-13077",
      "cwe": {
        "id": "CWE-323",
        "name": "Reusing a Nonce, Key Pair in Encryption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An industry-wide vulnerability exists in the WPA and WPA2 protocol affected by the Key Reinstallation Attacks known as KRACK. The four-way hand shake traffic in the Wi-Fi Protected Access WPA and WPA2 protocol can be manipulated to allow nonce reuse, resulting in key reinstallation. This could allow an attacker to execute a man-in-the-middle attack, enabling the attacker within radio range to replay, decrypt, or spoof frames. The following CVEs have been assigned to this group of vulnerabilities: CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.. CVE-2017-13078: Reinstallation of the group key during the four-way handshake. CVE-2017-13078: Reinstallation of the group key during the four-way handshake.. CVE-2017-13079: Reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake.CVE-2017-13077: Reinstallation of the pairwise key during the four-way handshake.",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Stryker has released software updates for affected products to mitigate the KRACK vulnerabilities.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Stryker recommends users take additional defensive measures to minimize the risk of exploitation. Specifically, users should:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "For additional questions, users can call 1-800-STRYKER, option 2 for Stryker Medical Technical Support.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).\n\nNon-security issues fixed:\n\n- Enable SAE support (jsc#SLE-14992).\n- Limit P2P_DEVICE name to appropriate ifname size.\n- Fix wicked wlan (bsc#1156920)\n- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)\n- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)\n- Fix WLAN config on boot with wicked. (bsc#1166933)\n- Update to 2.9 release:\n   * SAE changes\n     - disable use of groups using Brainpool curves\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * EAP-pwd changes\n     - disable use of groups using Brainpool curves\n     - allow the set of groups to be configured (eap_pwd_groups)\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * fixed FT-EAP initial mobility domain association using PMKSA caching\n     (disabled by default for backwards compatibility; can be enabled\n     with ft_eap_pmksa_caching=1)\n   * fixed a regression in OpenSSL 1.1+ engine loading\n   * added validation of RSNE in (Re)Association Response frames\n   * fixed DPP bootstrapping URI parser of channel list\n   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS\n   * extended ca_cert_blob to support PEM format\n   * improved robustness of P2P Action frame scheduling\n   * added support for EAP-SIM/AKA using anonymous@realm identity\n   * fixed Hotspot 2.0 credential selection based on roaming consortium\n     to ignore credentials without a specific EAP method\n   * added experimental support for EAP-TEAP peer (RFC 7170)\n   * added experimental support for EAP-TLS peer with TLS v1.3\n   * fixed a regression in WMM parameter configuration for a TDLS peer\n   * fixed a regression in operation with drivers that offload 802.1X\n     4-way handshake\n   * fixed an ECDH operation corner case with OpenSSL\n   * SAE changes\n     - added support for SAE Password Identifier\n     - changed default configuration to enable only groups 19, 20, 21\n       (i.e., disable groups 25 and 26) and disable all unsuitable groups\n       completely based on REVmd changes\n     - do not regenerate PWE unnecessarily when the AP uses the\n       anti-clogging token mechanisms\n     - fixed some association cases where both SAE and FT-SAE were enabled\n       on both the station and the selected AP\n     - started to prefer FT-SAE over SAE AKM if both are enabled\n     - started to prefer FT-SAE over FT-PSK if both are enabled\n     - fixed FT-SAE when SAE PMKSA caching is used\n     - reject use of unsuitable groups based on new implementation guidance\n       in REVmd (allow only FFC groups with prime \u003e= 3072 bits and ECC\n       groups with prime \u003e= 256)\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)\n   * EAP-pwd changes\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)\n     - verify server scalar/element\n       [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,\n       CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)\n     - fix message reassembly issue with unexpected fragment\n       [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)\n     - enforce rand,mask generation rules more strictly\n     - fix a memory leak in PWE derivation\n     - disallow ECC groups with a prime under 256 bits (groups 25, 26, and\n       27)\n     - SAE/EAP-pwd side-channel attack update\n       [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)\n   * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y\n   * Hotspot 2.0 changes\n     - do not indicate release number that is higher than the one\n       AP supports\n     - added support for release number 3\n     - enable PMF automatically for network profiles created from\n       credentials\n   * fixed OWE network profile saving\n   * fixed DPP network profile saving\n   * added support for RSN operating channel validation\n     (CONFIG_OCV=y and network profile parameter ocv=1)\n   * added Multi-AP backhaul STA support\n   * fixed build with LibreSSL\n   * number of MKA/MACsec fixes and extensions\n   * extended domain_match and domain_suffix_match to allow list of values\n   * fixed dNSName matching in domain_match and domain_suffix_match when\n     using wolfSSL\n   * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both\n     are enabled\n   * extended nl80211 Connect and external authentication to support\n     SAE, FT-SAE, FT-EAP-SHA384\n   * fixed KEK2 derivation for FILS+FT\n   * extended client_cert file to allow loading of a chain of PEM\n     encoded certificates\n   * extended beacon reporting functionality\n   * extended D-Bus interface with number of new properties\n   * fixed a regression in FT-over-DS with mac80211-based drivers\n   * OpenSSL: allow systemwide policies to be overridden\n   * extended driver flags indication for separate 802.1X and PSK\n     4-way handshake offload capability\n   * added support for random P2P Device/Interface Address use\n   * extended PEAP to derive EMSK to enable use with ERP/FILS\n   * extended WPS to allow SAE configuration to be added automatically\n     for PSK (wps_cred_add_sae=1)\n   * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)\n   * extended domain_match and domain_suffix_match to allow list of values\n   * added a RSN workaround for misbehaving PMF APs that advertise\n     IGTK/BIP KeyID using incorrect byte order\n   * fixed PTK rekeying with FILS and FT\n   * fixed WPA packet number reuse with replayed messages and key\n     reinstallation\n     [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,\n     CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n   * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant\n     [https://w1.fi/security/2018-1/] (CVE-2018-14526)\n   * added support for FILS (IEEE 802.11ai) shared key authentication\n   * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;\n     and transition mode defined by WFA)\n   * added support for DPP (Wi-Fi Device Provisioning Protocol)\n   * added support for RSA 3k key case with Suite B 192-bit level\n   * fixed Suite B PMKSA caching not to update PMKID during each 4-way\n     handshake\n   * fixed EAP-pwd pre-processing with PasswordHashHash\n   * added EAP-pwd client support for salted passwords\n   * fixed a regression in TDLS prohibited bit validation\n   * started to use estimated throughput to avoid undesired signal\n     strength based roaming decision\n   * MACsec/MKA:\n     - new macsec_linux driver interface support for the Linux\n       kernel macsec module\n     - number of fixes and extensions\n   * added support for external persistent storage of PMKSA cache\n     (PMKSA_GET/PMKSA_ADD control interface commands; and\n      MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)\n   * fixed mesh channel configuration pri/sec switch case\n   * added support for beacon report\n   * large number of other fixes, cleanup, and extensions\n   * added support for randomizing local address for GAS queries\n     (gas_rand_mac_addr parameter)\n   * fixed EAP-SIM/AKA/AKA\u0027 ext auth cases within TLS tunnel\n   * added option for using random WPS UUID (auto_uuid=1)\n   * added SHA256-hash support for OCSP certificate matching\n   * fixed EAP-AKA\u0027 to add AT_KDF into Synchronization-Failure\n   * fixed a regression in RSN pre-authentication candidate selection\n   * added option to configure allowed group management cipher suites\n     (group_mgmt network profile parameter)\n   * removed all PeerKey functionality\n   * fixed nl80211 AP and mesh mode configuration regression with\n     Linux 4.15 and newer\n   * added ap_isolate configuration option for AP mode\n   * added support for nl80211 to offload 4-way handshake into the driver\n   * added support for using wolfSSL cryptographic library\n   * SAE\n     - added support for configuring SAE password separately of the\n       WPA2 PSK/passphrase\n     - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection\n       for SAE;\n       note: this is not backwards compatible, i.e., both the AP and\n       station side implementations will need to be update at the same\n       time to maintain interoperability\n     - added support for Password Identifier\n     - fixed FT-SAE PMKID matching\n   * Hotspot 2.0\n     - added support for fetching of Operator Icon Metadata ANQP-element\n     - added support for Roaming Consortium Selection element\n     - added support for Terms and Conditions\n     - added support for OSEN connection in a shared RSN BSS\n     - added support for fetching Venue URL information\n   * added support for using OpenSSL 1.1.1\n   * FT\n     - disabled PMKSA caching with FT since it is not fully functional\n     - added support for SHA384 based AKM\n     - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,\n       BIP-GMAC-256 in addition to previously supported BIP-CMAC-128\n     - fixed additional IE inclusion in Reassociation Request frame when\n       using FT protocol\n\n- Changed service-files for start after network (systemd-networkd).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-2053",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2053-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:2053-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:2053-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2R3VXKTYLLUYFBZQ2NNAI5NSZOBXISJZ/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131644",
        "url": "https://bugzilla.suse.com/1131644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131868",
        "url": "https://bugzilla.suse.com/1131868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131870",
        "url": "https://bugzilla.suse.com/1131870"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131871",
        "url": "https://bugzilla.suse.com/1131871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131872",
        "url": "https://bugzilla.suse.com/1131872"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131874",
        "url": "https://bugzilla.suse.com/1131874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133640",
        "url": "https://bugzilla.suse.com/1133640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144443",
        "url": "https://bugzilla.suse.com/1144443"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150934",
        "url": "https://bugzilla.suse.com/1150934"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156920",
        "url": "https://bugzilla.suse.com/1156920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166933",
        "url": "https://bugzilla.suse.com/1166933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167331",
        "url": "https://bugzilla.suse.com/1167331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930077",
        "url": "https://bugzilla.suse.com/930077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930078",
        "url": "https://bugzilla.suse.com/930078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930079",
        "url": "https://bugzilla.suse.com/930079"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4141 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4142 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4143 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8041 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13077 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13082 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11555 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16275 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9494 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9495 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9495/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9497 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9499 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9499/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2020-11-26T17:28:36Z",
      "generator": {
        "date": "2020-11-26T17:28:36Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:2053-1",
      "initial_release_date": "2020-11-26T17:28:36Z",
      "revision_history": [
        {
          "date": "2020-11-26T17:28:36Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp151.5.10.1.i586",
                "product": {
                  "name": "wpa_supplicant-2.9-lp151.5.10.1.i586",
                  "product_id": "wpa_supplicant-2.9-lp151.5.10.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
                  "product_id": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp151.5.10.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.9-lp151.5.10.1.x86_64",
                  "product_id": "wpa_supplicant-2.9-lp151.5.10.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64",
                  "product_id": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.1",
                "product": {
                  "name": "openSUSE Leap 15.1",
                  "product_id": "openSUSE Leap 15.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp151.5.10.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586"
        },
        "product_reference": "wpa_supplicant-2.9-lp151.5.10.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp151.5.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-lp151.5.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64 as component of openSUSE Leap 15.1",
          "product_id": "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-4141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4141",
          "url": "https://www.suse.com/security/cve/CVE-2015-4141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930077 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/930077"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4141"
    },
    {
      "cve": "CVE-2015-4142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4142",
          "url": "https://www.suse.com/security/cve/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930078 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/930078"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4142"
    },
    {
      "cve": "CVE-2015-4143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4143",
          "url": "https://www.suse.com/security/cve/CVE-2015-4143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930079 for CVE-2015-4143",
          "url": "https://bugzilla.suse.com/930079"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4143"
    },
    {
      "cve": "CVE-2015-8041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8041",
          "url": "https://www.suse.com/security/cve/CVE-2015-8041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937419 for CVE-2015-8041",
          "url": "https://bugzilla.suse.com/937419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8041"
    },
    {
      "cve": "CVE-2017-13077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13077",
          "url": "https://www.suse.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063963 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13082",
          "url": "https://www.suse.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13086",
          "url": "https://www.suse.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13088"
    },
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    },
    {
      "cve": "CVE-2019-11555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11555",
          "url": "https://www.suse.com/security/cve/CVE-2019-11555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133640 for CVE-2019-11555",
          "url": "https://bugzilla.suse.com/1133640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11555"
    },
    {
      "cve": "CVE-2019-13377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13377",
          "url": "https://www.suse.com/security/cve/CVE-2019-13377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144443 for CVE-2019-13377",
          "url": "https://bugzilla.suse.com/1144443"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13377"
    },
    {
      "cve": "CVE-2019-16275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16275",
          "url": "https://www.suse.com/security/cve/CVE-2019-16275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150934 for CVE-2019-16275",
          "url": "https://bugzilla.suse.com/1150934"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16275"
    },
    {
      "cve": "CVE-2019-9494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9494",
          "url": "https://www.suse.com/security/cve/CVE-2019-9494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131868 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1194732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9494"
    },
    {
      "cve": "CVE-2019-9495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9495",
          "url": "https://www.suse.com/security/cve/CVE-2019-9495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131870 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1194733"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9495"
    },
    {
      "cve": "CVE-2019-9497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9497",
          "url": "https://www.suse.com/security/cve/CVE-2019-9497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9497"
    },
    {
      "cve": "CVE-2019-9498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9498",
          "url": "https://www.suse.com/security/cve/CVE-2019-9498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9498"
    },
    {
      "cve": "CVE-2019-9499",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9499"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
          "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9499",
          "url": "https://www.suse.com/security/cve/CVE-2019-9499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-2.9-lp151.5.10.1.x86_64",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.i586",
            "openSUSE Leap 15.1:wpa_supplicant-gui-2.9-lp151.5.10.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-26T17:28:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9499"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for wpa_supplicant",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for wpa_supplicant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).\n\nNon-security issues fixed:\n\n- Enable SAE support (jsc#SLE-14992).\n- Limit P2P_DEVICE name to appropriate ifname size.\n- Fix wicked wlan (bsc#1156920)\n- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)\n- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)\n- Fix WLAN config on boot with wicked. (bsc#1166933)\n- Update to 2.9 release:\n   * SAE changes\n     - disable use of groups using Brainpool curves\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * EAP-pwd changes\n     - disable use of groups using Brainpool curves\n     - allow the set of groups to be configured (eap_pwd_groups)\n     - improved protection against side channel attacks\n     [https://w1.fi/security/2019-6/]\n   * fixed FT-EAP initial mobility domain association using PMKSA caching\n     (disabled by default for backwards compatibility; can be enabled\n     with ft_eap_pmksa_caching=1)\n   * fixed a regression in OpenSSL 1.1+ engine loading\n   * added validation of RSNE in (Re)Association Response frames\n   * fixed DPP bootstrapping URI parser of channel list\n   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS\n   * extended ca_cert_blob to support PEM format\n   * improved robustness of P2P Action frame scheduling\n   * added support for EAP-SIM/AKA using anonymous@realm identity\n   * fixed Hotspot 2.0 credential selection based on roaming consortium\n     to ignore credentials without a specific EAP method\n   * added experimental support for EAP-TEAP peer (RFC 7170)\n   * added experimental support for EAP-TLS peer with TLS v1.3\n   * fixed a regression in WMM parameter configuration for a TDLS peer\n   * fixed a regression in operation with drivers that offload 802.1X\n     4-way handshake\n   * fixed an ECDH operation corner case with OpenSSL\n   * SAE changes\n     - added support for SAE Password Identifier\n     - changed default configuration to enable only groups 19, 20, 21\n       (i.e., disable groups 25 and 26) and disable all unsuitable groups\n       completely based on REVmd changes\n     - do not regenerate PWE unnecessarily when the AP uses the\n       anti-clogging token mechanisms\n     - fixed some association cases where both SAE and FT-SAE were enabled\n       on both the station and the selected AP\n     - started to prefer FT-SAE over SAE AKM if both are enabled\n     - started to prefer FT-SAE over FT-PSK if both are enabled\n     - fixed FT-SAE when SAE PMKSA caching is used\n     - reject use of unsuitable groups based on new implementation guidance\n       in REVmd (allow only FFC groups with prime \u003e= 3072 bits and ECC\n       groups with prime \u003e= 256)\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)\n   * EAP-pwd changes\n     - minimize timing and memory use differences in PWE derivation\n       [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)\n     - verify server scalar/element\n       [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,\n       CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)\n     - fix message reassembly issue with unexpected fragment\n       [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)\n     - enforce rand,mask generation rules more strictly\n     - fix a memory leak in PWE derivation\n     - disallow ECC groups with a prime under 256 bits (groups 25, 26, and\n       27)\n     - SAE/EAP-pwd side-channel attack update\n       [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)\n   * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y\n   * Hotspot 2.0 changes\n     - do not indicate release number that is higher than the one\n       AP supports\n     - added support for release number 3\n     - enable PMF automatically for network profiles created from\n       credentials\n   * fixed OWE network profile saving\n   * fixed DPP network profile saving\n   * added support for RSN operating channel validation\n     (CONFIG_OCV=y and network profile parameter ocv=1)\n   * added Multi-AP backhaul STA support\n   * fixed build with LibreSSL\n   * number of MKA/MACsec fixes and extensions\n   * extended domain_match and domain_suffix_match to allow list of values\n   * fixed dNSName matching in domain_match and domain_suffix_match when\n     using wolfSSL\n   * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both\n     are enabled\n   * extended nl80211 Connect and external authentication to support\n     SAE, FT-SAE, FT-EAP-SHA384\n   * fixed KEK2 derivation for FILS+FT\n   * extended client_cert file to allow loading of a chain of PEM\n     encoded certificates\n   * extended beacon reporting functionality\n   * extended D-Bus interface with number of new properties\n   * fixed a regression in FT-over-DS with mac80211-based drivers\n   * OpenSSL: allow systemwide policies to be overridden\n   * extended driver flags indication for separate 802.1X and PSK\n     4-way handshake offload capability\n   * added support for random P2P Device/Interface Address use\n   * extended PEAP to derive EMSK to enable use with ERP/FILS\n   * extended WPS to allow SAE configuration to be added automatically\n     for PSK (wps_cred_add_sae=1)\n   * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)\n   * extended domain_match and domain_suffix_match to allow list of values\n   * added a RSN workaround for misbehaving PMF APs that advertise\n     IGTK/BIP KeyID using incorrect byte order\n   * fixed PTK rekeying with FILS and FT\n   * fixed WPA packet number reuse with replayed messages and key\n     reinstallation\n     [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,\n     CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,\n     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)\n   * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant\n     [https://w1.fi/security/2018-1/] (CVE-2018-14526)\n   * added support for FILS (IEEE 802.11ai) shared key authentication\n   * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;\n     and transition mode defined by WFA)\n   * added support for DPP (Wi-Fi Device Provisioning Protocol)\n   * added support for RSA 3k key case with Suite B 192-bit level\n   * fixed Suite B PMKSA caching not to update PMKID during each 4-way\n     handshake\n   * fixed EAP-pwd pre-processing with PasswordHashHash\n   * added EAP-pwd client support for salted passwords\n   * fixed a regression in TDLS prohibited bit validation\n   * started to use estimated throughput to avoid undesired signal\n     strength based roaming decision\n   * MACsec/MKA:\n     - new macsec_linux driver interface support for the Linux\n       kernel macsec module\n     - number of fixes and extensions\n   * added support for external persistent storage of PMKSA cache\n     (PMKSA_GET/PMKSA_ADD control interface commands; and\n      MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)\n   * fixed mesh channel configuration pri/sec switch case\n   * added support for beacon report\n   * large number of other fixes, cleanup, and extensions\n   * added support for randomizing local address for GAS queries\n     (gas_rand_mac_addr parameter)\n   * fixed EAP-SIM/AKA/AKA\u0027 ext auth cases within TLS tunnel\n   * added option for using random WPS UUID (auto_uuid=1)\n   * added SHA256-hash support for OCSP certificate matching\n   * fixed EAP-AKA\u0027 to add AT_KDF into Synchronization-Failure\n   * fixed a regression in RSN pre-authentication candidate selection\n   * added option to configure allowed group management cipher suites\n     (group_mgmt network profile parameter)\n   * removed all PeerKey functionality\n   * fixed nl80211 AP and mesh mode configuration regression with\n     Linux 4.15 and newer\n   * added ap_isolate configuration option for AP mode\n   * added support for nl80211 to offload 4-way handshake into the driver\n   * added support for using wolfSSL cryptographic library\n   * SAE\n     - added support for configuring SAE password separately of the\n       WPA2 PSK/passphrase\n     - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection\n       for SAE;\n       note: this is not backwards compatible, i.e., both the AP and\n       station side implementations will need to be update at the same\n       time to maintain interoperability\n     - added support for Password Identifier\n     - fixed FT-SAE PMKID matching\n   * Hotspot 2.0\n     - added support for fetching of Operator Icon Metadata ANQP-element\n     - added support for Roaming Consortium Selection element\n     - added support for Terms and Conditions\n     - added support for OSEN connection in a shared RSN BSS\n     - added support for fetching Venue URL information\n   * added support for using OpenSSL 1.1.1\n   * FT\n     - disabled PMKSA caching with FT since it is not fully functional\n     - added support for SHA384 based AKM\n     - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,\n       BIP-GMAC-256 in addition to previously supported BIP-CMAC-128\n     - fixed additional IE inclusion in Reassociation Request frame when\n       using FT protocol\n\n- Changed service-files for start after network (systemd-networkd).\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2020-2059",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2059-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2020:2059-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2020:2059-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HDY6AZL2NYOKU57GM74M5JHC5SYA3IY/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131644",
        "url": "https://bugzilla.suse.com/1131644"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131868",
        "url": "https://bugzilla.suse.com/1131868"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131870",
        "url": "https://bugzilla.suse.com/1131870"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131871",
        "url": "https://bugzilla.suse.com/1131871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131872",
        "url": "https://bugzilla.suse.com/1131872"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131874",
        "url": "https://bugzilla.suse.com/1131874"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133640",
        "url": "https://bugzilla.suse.com/1133640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1144443",
        "url": "https://bugzilla.suse.com/1144443"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1150934",
        "url": "https://bugzilla.suse.com/1150934"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156920",
        "url": "https://bugzilla.suse.com/1156920"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1166933",
        "url": "https://bugzilla.suse.com/1166933"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167331",
        "url": "https://bugzilla.suse.com/1167331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930077",
        "url": "https://bugzilla.suse.com/930077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930078",
        "url": "https://bugzilla.suse.com/930078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 930079",
        "url": "https://bugzilla.suse.com/930079"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4141 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4142 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4142/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4143 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8041 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8041/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13077 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13078 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13078/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13079 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13079/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13080 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13080/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13081 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13082 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13082/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13087 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13087/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-13088 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-13088/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-14526 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-14526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11555 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11555/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16275 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9494 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9494/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9495 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9495/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9497 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9497/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-9499 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-9499/"
      }
    ],
    "title": "Security update for wpa_supplicant",
    "tracking": {
      "current_release_date": "2020-11-27T05:23:21Z",
      "generator": {
        "date": "2020-11-27T05:23:21Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2020:2059-1",
      "initial_release_date": "2020-11-27T05:23:21Z",
      "revision_history": [
        {
          "date": "2020-11-27T05:23:21Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp152.8.3.1.i586",
                "product": {
                  "name": "wpa_supplicant-2.9-lp152.8.3.1.i586",
                  "product_id": "wpa_supplicant-2.9-lp152.8.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
                  "product_id": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "wpa_supplicant-2.9-lp152.8.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-2.9-lp152.8.3.1.x86_64",
                  "product_id": "wpa_supplicant-2.9-lp152.8.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64",
                "product": {
                  "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64",
                  "product_id": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp152.8.3.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586"
        },
        "product_reference": "wpa_supplicant-2.9-lp152.8.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-2.9-lp152.8.3.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-2.9-lp152.8.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        },
        "product_reference": "wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-4141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4141",
          "url": "https://www.suse.com/security/cve/CVE-2015-4141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930077 for CVE-2015-4141",
          "url": "https://bugzilla.suse.com/930077"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4141"
    },
    {
      "cve": "CVE-2015-4142",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4142"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service (crash) via a crafted frame, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4142",
          "url": "https://www.suse.com/security/cve/CVE-2015-4142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915323 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/915323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930078 for CVE-2015-4142",
          "url": "https://bugzilla.suse.com/930078"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4142"
    },
    {
      "cve": "CVE-2015-4143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd server and peer implementation in hostapd and wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted (1) Commit or (2) Confirm message payload.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4143",
          "url": "https://www.suse.com/security/cve/CVE-2015-4143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 930079 for CVE-2015-4143",
          "url": "https://bugzilla.suse.com/930079"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4143"
    },
    {
      "cve": "CVE-2015-8041",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8041"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8041",
          "url": "https://www.suse.com/security/cve/CVE-2015-8041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937419 for CVE-2015-8041",
          "url": "https://bugzilla.suse.com/937419"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8041"
    },
    {
      "cve": "CVE-2017-13077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13077",
          "url": "https://www.suse.com/security/cve/CVE-2017-13077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063963 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1063963"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13077",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13077"
    },
    {
      "cve": "CVE-2017-13078",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13078"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13078",
          "url": "https://www.suse.com/security/cve/CVE-2017-13078"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13078",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13078"
    },
    {
      "cve": "CVE-2017-13079",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13079"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13079",
          "url": "https://www.suse.com/security/cve/CVE-2017-13079"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13079",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13079"
    },
    {
      "cve": "CVE-2017-13080",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13080"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13080",
          "url": "https://www.suse.com/security/cve/CVE-2017-13080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063667 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063671 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1063671"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178872 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1178872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13080",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13080"
    },
    {
      "cve": "CVE-2017-13081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13081",
          "url": "https://www.suse.com/security/cve/CVE-2017-13081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1066295 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1066295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13081",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13081"
    },
    {
      "cve": "CVE-2017-13082",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13082"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13082",
          "url": "https://www.suse.com/security/cve/CVE-2017-13082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13082",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13082"
    },
    {
      "cve": "CVE-2017-13086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13086",
          "url": "https://www.suse.com/security/cve/CVE-2017-13086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13086",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13086"
    },
    {
      "cve": "CVE-2017-13087",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13087"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13087",
          "url": "https://www.suse.com/security/cve/CVE-2017-13087"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13087",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13087"
    },
    {
      "cve": "CVE-2017-13088",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-13088"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-13088",
          "url": "https://www.suse.com/security/cve/CVE-2017-13088"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056061 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1056061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1063479 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1063479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179588 for CVE-2017-13088",
          "url": "https://bugzilla.suse.com/1179588"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-13088"
    },
    {
      "cve": "CVE-2018-14526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-14526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-14526",
          "url": "https://www.suse.com/security/cve/CVE-2018-14526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1104205 for CVE-2018-14526",
          "url": "https://bugzilla.suse.com/1104205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-14526"
    },
    {
      "cve": "CVE-2019-11555",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11555"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11555",
          "url": "https://www.suse.com/security/cve/CVE-2019-11555"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133640 for CVE-2019-11555",
          "url": "https://bugzilla.suse.com/1133640"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11555"
    },
    {
      "cve": "CVE-2019-13377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE and EAP-pwd in hostapd and wpa_supplicant 2.x through 2.8 are vulnerable to side-channel attacks as a result of observable timing differences and cache access patterns when Brainpool curves are used. An attacker may be able to gain leaked information from a side-channel attack that can be used for full password recovery.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13377",
          "url": "https://www.suse.com/security/cve/CVE-2019-13377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1144443 for CVE-2019-13377",
          "url": "https://bugzilla.suse.com/1144443"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13377"
    },
    {
      "cve": "CVE-2019-16275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hostapd before 2.10 and wpa_supplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF (aka management frame protection). The attacker must send a crafted 802.11 frame from a location that is within the 802.11 communications range.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16275",
          "url": "https://www.suse.com/security/cve/CVE-2019-16275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1150934 for CVE-2019-16275",
          "url": "https://bugzilla.suse.com/1150934"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16275"
    },
    {
      "cve": "CVE-2019-9494",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9494"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9494",
          "url": "https://www.suse.com/security/cve/CVE-2019-9494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131868 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1131868"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194732 for CVE-2019-9494",
          "url": "https://bugzilla.suse.com/1194732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9494"
    },
    {
      "cve": "CVE-2019-9495",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9495"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9495",
          "url": "https://www.suse.com/security/cve/CVE-2019-9495"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131291 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131870 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1131870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194733 for CVE-2019-9495",
          "url": "https://bugzilla.suse.com/1194733"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-9495"
    },
    {
      "cve": "CVE-2019-9497",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9497"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9497",
          "url": "https://www.suse.com/security/cve/CVE-2019-9497"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9497",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-9497"
    },
    {
      "cve": "CVE-2019-9498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9498",
          "url": "https://www.suse.com/security/cve/CVE-2019-9498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9498",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9498"
    },
    {
      "cve": "CVE-2019-9499",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-9499"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
          "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-9499",
          "url": "https://www.suse.com/security/cve/CVE-2019-9499"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131871 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131872 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131872"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1131874 for CVE-2019-9499",
          "url": "https://bugzilla.suse.com/1131874"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-2.9-lp152.8.3.1.x86_64",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.i586",
            "openSUSE Leap 15.2:wpa_supplicant-gui-2.9-lp152.8.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-11-27T05:23:21Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-9499"
    }
  ]
}