CVE-2023-52160

Summary

CVE-2023-52160 is a vulnerability affecting the PEAP implementation in wpa_supplicant up to version 2.10. An attacker can exploit this flaw to bypass authentication by sending an EAP-TLV Success packet instead of initiating Phase 2 authentication. For a successful attack, the target network's TLS certificate must not be verified during Phase 1. This vulnerability enables an adversary to impersonate Enterprise Wi-Fi networks, compromising network security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.