description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
problem types: CWE-323: Reusing a Nonce, Key Pair in Encryption
affected:
{
product: Wi-Fi Protected Access (WPA and WPA2)
vendor: Wi-Fi Alliance
versions:
status: affected, version: WPA
status: affected, version: WPA2
}