CVE-2017-13088

CVE-2017-13088 is a medium-severity vulnerability affecting Wi-Fi Protected Access (WPA/WPA2) implementations that support 802.11v, specifically impacting products from vendors like Canonical, Debian, and Red Hat. It allows an attacker within radio range to replay frames from access points to clients by reinstalling the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame. The attack has high integrity impact, but no confidentiality or availability impact, and requires high attack complexity. While it has garnered significant media attention and community discussion, there is no known active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB.