CWE-301 · Authentication
Reflection Attack in an Authentication Protocol
1CVEs
SortMost likely exploited
1 CVEs with CWE-301 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-9497The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitWi-Fi Alliance · hostapd with EAP-pwd support · 2019-04-17 | – | 5.0% | 2019-04-17 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.