CVE-2017-13087: Medium severity android vulnerability
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
Other sources
Wi-Fi Protected Access II (WPA2) handshake traffic can be manipulated to induce nonce and session key reuse, resulting in key reinstallation by a victim wireless access point (AP) or client. After establishing a man-in-the-middle position between an AP and client, an attacker can selectively manipulate the timing and transmission of messages in the WPA2 Wireless Network Management (WNM) Sleep Mode handshake, resulting in out-of-sequence reception or retransmission of messages.
An attacker within the wireless communications range of an affected AP and client may leverage these vulnerabilities to conduct attacks that are dependent on the data confidentiality protocol being used. Attacks may include arbitrary packet decryption and injection, TCP connection hijacking, HTTP content injection, or the replay of unicast, broadcast, and multicast frames.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13087?
CVE-2017-13087 has a high severity level as it allows attackers to exploit the Group Temporal Key reinstallation during WNM Sleep Mode Response frames.
How do I fix CVE-2017-13087?
To fix CVE-2017-13087, users should apply the latest patches provided by their operating system or device vendors that address this vulnerability.
What systems are affected by CVE-2017-13087?
CVE-2017-13087 affects various systems including multiple versions of Android, Ubuntu, Debian, FreeBSD, and OpenSUSE.
Can CVE-2017-13087 be exploited remotely?
No, CVE-2017-13087 requires an attacker to be within radio range to exploit the vulnerability.
What is the potential impact of exploiting CVE-2017-13087?
Exploiting CVE-2017-13087 could allow attackers to intercept and replay network frames, potentially compromising the confidentiality of the data transmitted.