CVE-2023-52424

A flaw was found in the IEEE 802.11 standard. This vulnerability possibly allows an adversary to trick a victim into connecting to an unintended or untrusted network because the SSID is not always used to derive the pairwise master key or session keys and because there is not a protected exchange of an SSID during a 4-way handshake.

This vulnerability affects networks using the WEP, WPA3 SAE-loop, 802.1x/EAP, FILS, and Mesh AMPE authentication protocols, arising from a design flaw in the WiFi standard IEEE 802.11 allows attackers to trick victims into connecting to less secure networks and intercept their traffic. This significantly impacts Confidentiality, as sensitive data can be intercepted. Integrity is compromised because attackers can alter intercepted data. Availability is also affected, as the attack exploits the auto-disconnect feature in certain VPN clients, causing the VPN to disable when the device connects to a predefined “trusted” WiFi network, leaving the user unprotected. The impact is Moderate, because of the attack limitations: credentials of the valid WiFi network and malicious one suppose to be the same.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid Credential Reuse: One of the key recommendations is to avoid reusing credentials across different SSIDs. Each network should have unique credentials to prevent attackers from easily setting up rogue networks with matching authentication details.