CVE-2023-52161

CVE-2023-52161 is a high-severity authentication bypass vulnerability affecting the Access Point functionality in iNet wireless daemon (IWD) versions prior to 2.14. An attacker can gain unauthorized access to a protected Wi-Fi network by manipulating the EAPOL handshake, specifically by sending an all-zero key in Msg4/4, bypassing the legitimate password. This vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector and low attack complexity, potentially leading to full confidentiality compromise. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.