Skip to content

CWE-301 · Authentication

Reflection Attack in an Authentication Protocol

1CVEs

1 CVEs with CWE-301 as their weakness

CVEs with CWE-301, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2019-9497The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitWi-Fi Alliance · hostapd with EAP-pwd support · 2019-04-17–5.0%2019-04-17

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in