Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-13077

23
FAUCET Score

CVE-2017-13077 describes a vulnerability in Wi-Fi Protected Access (WPA and WPA2) that allows an attacker to reinstall the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake. This flaw, affecting various products including canonical, debian, and redhat, enables an attacker within radio range to replay, decrypt, or spoof Wi-Fi frames. With a CVSS score of 6.8 (Medium), this vulnerability has a high impact on confidentiality and integrity, but requires high attack complexity and adjacent network access. Although the EPSS score is low, indicating a low probability of exploitation, the potential for significant data compromise is present. Currently, there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, and it is not listed in CISA's KEV catalog. Despite this, the vulnerability garnered significant community discussion and media coverage at the time of its disclosure, highlighting its perceived importance.

Impacted Technologies

VendorProductVersion(s)CPE
14.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
16.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
17.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:17.04:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

6.8MEDIUM

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
1.6
Impact Score
5.2
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.39%
Probability of exploitation in next 30 days
EPSS Percentile
82.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0239 is in the 99th percentile among its peer group of 1,749 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: wpa_supplicant-1:0.7.3-9.el6_9.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: wpa_supplicant-1:2.6-5.el7_4.1
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: wpa_supplicant

Vendor Advisories (1)

redhatCVE-2017-13077Important

wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake

Oct 16, 2017

References

access.redhat.com / errata/RHSA-2017:2907
Third Party Advisory
access.redhat.com / errata/RHSA-2017:2911
Third Party Advisory
access.redhat.com / security/vulnerabilities/kracks
Third Party Advisory
cert-portal.siemens.com / productcert/pdf/ssa-901333.pdf
cert.vde.com / en-us/advisories/vde-2017-003
cert.vde.com / en-us/advisories/vde-2017-005
lists.debian.org / debian-lts-announce/2018/11/msg00015.html
security.freebsd.org / advisories/FreeBSD-SA-17:07.wpa.asc
Third Party Advisory
security.gentoo.org / glsa/201711-03
source.android.com / security/bulletin/2017-11-01
source.android.com / security/bulletin/2018-04-01
source.android.com / security/bulletin/2018-06-01
support.apple.com / HT208219
support.apple.com / HT208220
support.apple.com / HT208221
support.apple.com / HT208222
support.hpe.com / hpsc/doc/public/display
support.lenovo.com / us/en/product_security/LEN-17420
Third Party Advisory
tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa
Third Party Advisory
w1.fi / security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
Third Party Advisory
krackattacks.com
Technical DescriptionThird Party Advisory
arubanetworks.com / assets/alert/ARUBA-PSA-2017-007.txt
Third Party Advisory
debian.org / security/2017/dsa-3999
Third Party Advisory
kb.cert.org / vuls/id/228519
Third Party AdvisoryUS Government Resource
oracle.com / technetwork/security-advisory/cpuapr2018-3678067.html
oracle.com / technetwork/security-advisory/cpujan2018-3236628.html
securityfocus.com / bid/101274
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039573
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039576
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039577
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039578
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039581
Third Party AdvisoryVDB Entry
securitytracker.com / id/1039585
Third Party AdvisoryVDB Entry
securitytracker.com / id/1041432
ubuntu.com / usn/USN-3455-1
Third Party Advisory