EXPOSURES › CVE-2022-23304
CVE-2022-23304
CRITICAL
DETAIL
SourceNVD · cve
Published2022-01-17
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-23304 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.