CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3686

wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.045

EPSS Ranking 88.7%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2014-3686

W1.fi » Hostapd » Version: 0.7.2

cpe:2.3:a:w1.fi:hostapd:0.7.2
W1.fi » Hostapd » Version: 1.0

cpe:2.3:a:w1.fi:hostapd:1.0
W1.fi » Hostapd » Version: 1.1

cpe:2.3:a:w1.fi:hostapd:1.1
W1.fi » Hostapd » Version: 2.0

cpe:2.3:a:w1.fi:hostapd:2.0
W1.fi » Hostapd » Version: 2.1

cpe:2.3:a:w1.fi:hostapd:2.1
W1.fi » Hostapd » Version: 2.2

cpe:2.3:a:w1.fi:hostapd:2.2
W1.fi » Wpa Supplicant » Version: 0.72

cpe:2.3:a:w1.fi:wpa_supplicant:0.72
W1.fi » Wpa Supplicant » Version: 1.0

cpe:2.3:a:w1.fi:wpa_supplicant:1.0
W1.fi » Wpa Supplicant » Version: 1.1

cpe:2.3:a:w1.fi:wpa_supplicant:1.1
W1.fi » Wpa Supplicant » Version: 2.0

cpe:2.3:a:w1.fi:wpa_supplicant:2.0
W1.fi » Wpa Supplicant » Version: 2.1

cpe:2.3:a:w1.fi:wpa_supplicant:2.1
W1.fi » Wpa Supplicant » Version: 2.2

cpe:2.3:a:w1.fi:wpa_supplicant:2.2
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Debian » Debian Linux » Version: 6.0

cpe:2.3:o:debian:debian_linux:6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3686

Products

Pricing

Contact Us