CVE-2022-23303

Published Jan 17, 2022·Updated Jul 14, 2026

NVD Description

The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.

Public Exploits & PoCs2 found

[POC] CVE-2022-23303 — hostapd_mirror

mirror of https://w1.fi/cgit/hostap/ till 30/01/2023 for CVE-2022-23303/4 - Bug 114981 CGX2.2

[POC] CVE-2022-23303 — hostapd_mirror

mirror of https://w1.fi/cgit/hostap/ till 30/01/2023 for CVE-2022-23303/4 - c22

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free