CVE-2017-13078

CVE-2017-13078 is a medium-severity vulnerability affecting Wi-Fi Protected Access (WPA and WPA2) implementations across various operating systems and vendors, including Canonical, Debian, and Red Hat. It allows an attacker within radio range to replay frames from access points to clients by re-installing the Group Temporal Key (GTK) during the four-way handshake. This attack has high integrity impact, but no confidentiality or availability impact. The vulnerability has a CVSS score of 5.3 and an attack vector of Adjacent Network, with high attack complexity. While there is no evidence of active exploitation in the wild (not in KEV), and no public exploit code available (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media coverage, indicating widespread awareness. The FAUCET Risk Score is low at 21/100.