CVE-2017-20161

Medium

Description

A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217188.

SeverityMedium

CVSS4.6

Exploit probability44. percentile0.5%

ProductMacgeiger

PublishedJan 2, 2023

First seenJan 2, 2023

Weakness typeCWE-74Injection

How to fix

Update

macgeiger_project macgeiger2017-12-02 or later

Patches

github.com/rofl0r/MacGeiger/commit/57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb

Affected products

Product	Affected versions	Fixed in
macgeiger_project macgeiger	v < 2017-12-02	2017-12-02

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.