Apple iOS CVE-2013-4616 Insecure Default WPA2 Password Generation Weakness
BID:60616
Info
Apple iOS CVE-2013-4616 Insecure Default WPA2 Password Generation Weakness
| Bugtraq ID: | 60616 |
| Class: | Design Error |
| CVE: |
CVE-2013-4616 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2013 12:00AM |
| Updated: | Mar 19 2015 09:07AM |
| Credit: | Andreas Kurtz, Daniel Metz, and Felix Freiling |
| Vulnerable: |
Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: | |
Discussion
Apple iOS CVE-2013-4616 Insecure Default WPA2 Password Generation Weakness
Apple iOS is prone to an insecure password generation weakness due to an error in the way mobile Wi-Fi hotspot generates default WPA2 passwords.
Successful exploits will allow remote attackers to perform brute-force attacks and obtain the Wi-Fi hotspot passwords. This may aid in further attacks.
Apple iOS is prone to an insecure password generation weakness due to an error in the way mobile Wi-Fi hotspot generates default WPA2 passwords.
Successful exploits will allow remote attackers to perform brute-force attacks and obtain the Wi-Fi hotspot passwords. This may aid in further attacks.