Wi-Fi Protected Access 2 (WPA2) Access Point Spoofing Vulnerability

Bugtraq ID:	41951
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 26 2010 12:00AM
Updated:	Jul 26 2010 12:00AM
Credit:	AirTight Networks
Vulnerable:	Wi-Fi Alliance WPA2 (Wi-Fi Protected Access 2) 0
Not Vulnerable:

Wi-Fi Protected Access 2 (WPA2) Access Point Spoofing Vulnerability

WPA2 is prone to a vulnerability that allows an attacker to impersonate the Access Point.

Exploiting this vulnerability, an attacker can gain access to potentially sensitive information. Information obtained may aid in further attacks.

Note that to exploit this issue the attacker must be an authorized Wi-Fi user of the Wi-Fi network.

Wi-Fi Protected Access 2 (WPA2) Access Point Spoofing Vulnerability

The discoverer of this issue has developed exploit code. This code is not known to be publicly available.

Wi-Fi Protected Access 2 (WPA2) Access Point Spoofing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Wi-Fi Protected Access 2 (WPA2) Access Point Spoofing Vulnerability

References:

• Wi-Fi Alliance Home Page (Wi-Fi Alliance)
  
• WPA2 Hole196 Vulnerability (AirTight Networks)