CVE-2025-24912
—CVSS 3.0
3.7 low
EPSS
<1%p53
Published
()
Modified
Description
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.
- Vendors
- w1.fi
- Products
- hostapd
- Weakness
- CWE-826
- Vector
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
In the news0 stories
No ingested article mentions this CVE yet.