CVEvulnerability

CVE-2022-47522

7.5 HIGH Published 2023-04-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-290

Description

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point (such as authentication frames or re-association frames) to remove the target's original security context. This behavior occurs because the specifications do not require an access point to purge its transmit queue before removing a client's pairwise encryption key.

Affected configurations

• ieee ieee 802.11 • sonicwall tz670 firmware • sonicwall tz570 firmware • sonicwall tz570p firmware • sonicwall tz570w firmware • sonicwall tz470 firmware • sonicwall tz470w firmware • sonicwall tz370 firmware • sonicwall tz370w firmware • sonicwall tz270 firmware • sonicwall tz270w firmware • sonicwall tz600 firmware • sonicwall tz600p firmware • sonicwall tz500 firmware • sonicwall tz500w firmware • sonicwall tz400 firmware • sonicwall tz400w firmware • sonicwall tz350 firmware • sonicwall tz350w firmware • sonicwall tz300 firmware • sonicwall tz300p firmware • sonicwall tz300w firmware • sonicwall soho 250 firmware • sonicwall soho 250w firmware • sonicwall sonicwave 231c firmware • sonicwall sonicwave 224w firmware • sonicwall sonicwave 432o firmware • sonicwall sonicwave 621 firmware • sonicwall sonicwave 641 firmware • sonicwall sonicwave 681 firmware

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References