CVE-2025-24912: Low severity w1.fi hostapd vulnerability
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24912?
CVE-2025-24912 is considered a high-severity vulnerability due to its potential to enable denial-of-service conditions in RADIUS authentication.
How does CVE-2025-24912 affect hostapd?
CVE-2025-24912 affects hostapd by allowing an attacker to inject crafted RADIUS packets, causing authentication to fail.
How do I fix CVE-2025-24912?
To fix CVE-2025-24912, update hostapd to the latest version that contains patches for this vulnerability.
What kind of attack does CVE-2025-24912 enable?
CVE-2025-24912 enables a man-in-the-middle attack where an attacker can disrupt RADIUS authentications.
What versions of hostapd are affected by CVE-2025-24912?
All versions of hostapd that process RADIUS packets are potentially affected by CVE-2025-24912.