Base Score

MEDIUM4.4

CVE-2012-2736

In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network.

VectorLOCAL

Published Bysecalert@redhat.com

Published DateDec 26, 2019, 20:15

Weakness Type (CWE):CWE-306

CVSS Metrics

Base Score

4.4

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

NONE

References

http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html
http://www.openwall.com/lists/oss-security/2012/06/15/2
http://www.openwall.com/lists/oss-security/2012/06/15/4
http://www.ubuntu.com/usn/USN-1483-1
http://www.ubuntu.com/usn/USN-1483-2
https://access.redhat.com/security/cve/cve-2012-2736
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2736
https://security-tracker.debian.org/tracker/CVE-2012-2736

Base Score

MEDIUM4.4

Weakness Type (CWE):CWE-306

CVSS Metrics

Base Score

4.4

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

NONE