CVEvulnerability

CVE-2014-3686

6.8 MEDIUM Published 2014-10-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.

Affected configurations

• w1.fi hostapd 0.7.2 • w1.fi hostapd 1.0 • w1.fi hostapd 1.1 • w1.fi hostapd 2.0 • w1.fi hostapd 2.1 • w1.fi hostapd 2.2 • w1.fi wpa supplicant 0.72 • w1.fi wpa supplicant 1.0 • w1.fi wpa supplicant 1.1 • w1.fi wpa supplicant 2.0 • w1.fi wpa supplicant 2.1 • w1.fi wpa supplicant 2.2 • canonical ubuntu linux 10.04 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • debian debian linux 6.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References