3.7

CVE-2025-24912

EPSS 0.16%
Veröffentlicht 12.03.2025 04:43:54
Zuletzt bearbeitet 24.10.2025 18:40:03
Quelle vultures@jpcert.or.jp
CVE-Watchlists
Login
Unerledigt
Login

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

W1.Fi ≫ Hostapd Version <= 2.11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.16%	0.378

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
vultures@jpcert.or.jp	3.7	2.2	1.4	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-826 Premature Release of Resource During Expected Lifetime

The product releases a resource that is still intended to be used by itself or another actor.

https://w1.fi/hostapd/

Product

https://w1.fi/cgit/hostap/commit/?id=726432d7622cc0088ac353d073b59628b590ea44

Patch

https://w1.fi/cgit/hostap/commit/?id=339a334551ca911187cc870f4f97ef08e11db109

Patch

https://jvn.jp/en/jp/JVN19358384/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-24912

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-24912

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-24912

EUVD