Description
A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality.
Product status
10.8.0.0 (semver)
10.7.0.0 (semver)
10.4.0.0 (semver)
8.13.0.0 (semver)
8.12.0.0 (semver)
8.10.0.0 (semver)
Credits
Xin'an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian, Zhaowei Tan,Srikanth V. Krishnamurthy from University of California, and Mathy Vanhoef from DistriNet, KU Leuven
References
support.hpe.com/...y?docId=hpesbnw05026en_us&docLocale=en_US