CVE-2012-2736 : In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2

In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network.

Published 2019-12-26 20:15:11

Updated 2020-08-18 15:05:58

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2012-2736

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Gnome » Networkmanager » Version: 0.9.2.0
cpe:2.3:a:gnome:networkmanager:0.9.2.0:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 10.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 11.04
cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 11.10
cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 12.1
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
Matching versions

Top countries where our scanners detected CVE-2012-2736

Top open port discovered on systems with this issue 8200

IPs affected by CVE-2012-2736 250

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2012-2736!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 18 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:L/AC:M/Au:N/C:P/I:P/A:N	3.4	4.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None
4.4	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	1.8	2.5	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Assigned by: nvd@nist.gov (Primary)

http://www.openwall.com/lists/oss-security/2012/06/15/2

oss-security - Re: CVE Request: NetworkManager creates an open network when asked to create an adhoc-WPA network
Mailing List;Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-2736

CVE-2012-2736- Red Hat Customer Portal
Third Party Advisory
http://www.ubuntu.com/usn/USN-1483-1

USN-1483-1: NetworkManager vulnerability | Ubuntu security notices | Ubuntu
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/06/15/4

oss-security - Re: CVE Request: NetworkManager creates an open network when asked to create an adhoc-WPA network
Mailing List;Patch;Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html

Server Error
Patch;Third Party Advisory
http://www.ubuntu.com/usn/USN-1483-2

USN-1483-2: network-manager-applet vulnerability | Ubuntu security notices | Ubuntu
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-2736

CVE-2012-2736
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2736

782627 – (CVE-2012-2736) CVE-2012-2736 NetworkManager: creating new WPA-secured wireless network results in insecure network being created instead
Exploit;Issue Tracking;Third Party Advisory

Jump to