CVE-2017-13077

EPSS 0.66% · P71 Updated Feb 21, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-13077

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

WPA和WPA2 安全特征问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

WPA和WPA2都是美国Wi-Fi联盟（Wi-Fi Alliance）的一套Wi-Fi访问保护方案，包括安全协议和安全认证程序。多个厂商提供的WiFi产品中的WPA和WPA2存在安全漏洞。攻击者可利用该漏洞在四次握手中重新安装成对加密密钥（PTK-TK），重播、解密或伪造帧。以下产商提供的产品受到影响：Aruba Networks；Cisco；Espressif Systems；Fortinet, Inc.；FreeBSD Project；Google；HostAP；Intel Corporation；

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Wi-Fi Alliance	Wi-Fi Protected Access (WPA and WPA2)	WPA	-

II. Public POCs for CVE-2017-13077

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2017-13077

请登录查看更多情报信息。

https://support.apple.com/HT208220x_refsource_CONFIRM
https://www.krackattacks.com/x_refsource_MISC
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlx_refsource_CONFIRM
https://cert.vde.com/en-us/advisories/vde-2017-003x_refsource_CONFIRM
Android Security Bulletin—June 2018 | Android Open Source Projectx_refsource_CONFIRM
SSA-901333 (Last Update: 2019-04-09): KRACK Attacks Vulnerabilities in Industrial Productsx_refsource_CONFIRM
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txtx_refsource_CONFIRM
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txtx_refsource_MISC
https://support.apple.com/HT208219x_refsource_CONFIRM
https://support.apple.com/HT208222x_refsource_CONFIRM
https://support.lenovo.com/us/en/product_security/LEN-17420x_refsource_CONFIRM
https://source.android.com/security/bulletin/2017-11-01x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlx_refsource_CONFIRM
https://cert.vde.com/en-us/advisories/vde-2017-005x_refsource_CONFIRM
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03792en_usx_refsource_CONFIRM
https://source.android.com/security/bulletin/2018-04-01x_refsource_CONFIRM
https://support.apple.com/HT208221x_refsource_CONFIRM
https://access.redhat.com/security/vulnerabilities/kracksx_refsource_CONFIRM
http://www.securityfocus.com/bid/101274vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1039573vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039576vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1041432vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039585vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039578vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039581vdb-entryx_refsource_SECTRACK
http://www.securitytracker.com/id/1039577vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2017/dsa-3999vendor-advisoryx_refsource_DEBIAN
http://www.kb.cert.org/vuls/id/228519third-party-advisoryx_refsource_CERT-VN
http://www.ubuntu.com/usn/USN-3455-1vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2017:2907vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:2911vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201711-03vendor-advisoryx_refsource_GENTOO
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:07.wpa.ascvendor-advisoryx_refsource_FREEBSD
https://lists.debian.org/debian-lts-announce/2018/11/msg00015.htmlmailing-listx_refsource_MLIST
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpavendor-advisoryx_refsource_CISCO
https://nvd.nist.gov/vuln/detail/CVE-2017-13077

Same Patch Batch · Wi-Fi Alliance · 2017-10-17 · 9 CVEs total

CVE-2017-13078		WPA和WPA2 安全特征问题漏洞
CVE-2017-13079		WPA和WPA2 安全特征问题漏洞
CVE-2017-13080		Intel PROSet/Wireless WiFi Software 安全特征问题漏洞
CVE-2017-13081		WPA和WPA2 安全特征问题漏洞
CVE-2017-13082		WPA和WPA2 安全特征问题漏洞
CVE-2017-13084		WPA和WPA2 安全特征问题漏洞
CVE-2017-13086		WPA和WPA2 安全特征问题漏洞
CVE-2017-13088		WPA和WPA2 安全特征问题漏洞

IV. Related Vulnerabilities

Same product: Wi-Fi Protected Access (WPA and WPA2)

Same vendor: Wi-Fi Alliance

V. Comments for CVE-2017-13077

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2017-13077

I. Basic Information for CVE-2017-13077

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2017-13077

III. Intelligence Information for CVE-2017-13077

Same Patch Batch · Wi-Fi Alliance · 2017-10-17 · 9 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2017-13077

Leave a comment