CVE:CVE-2022-23304
CNNVD:CNNVD-202201-1389
EAP-pwd是一种使用共享密码进行身份验证的 EAP 身份验证方法。
EAP-pwd 中存在加密问题漏洞，该漏洞源于产品的 hostapd 和 wpa supplicant 组件存在缓存访问模式错误。攻击者可通过该漏洞发起侧通道攻击。
solution:Upgrade w1.fi hostapd to a higher version than 2.10,and avoid the version (,2.10); Upgrade w1.fi wpa_supplicant to a higher version than 2.10,and avoid the version (,2.10); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35