CVE-2017-20161

MEDIUM

macgeiger < 2017-12-02 - Injection in ESSID Handler

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217188.

References (3)

Core 3
Core References
Permissions Required, Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.217188
Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.217188

Scores

CVSS v3 4.6
EPSS 0.0050
EPSS Percentile 38.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Details

CWE
CWE-74
Status published
Products (1)
macgeiger_project/macgeiger < 2017-12-02
Published Jan 02, 2023
Tracked Since Feb 18, 2026