VULNERABILITY INTELLIGENCE
CVE-2014-3686
CVSS score6.8 MEDIUM
EPSS probability4.95%
CISA KEVNot currently listed
Published2014-10-16
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame.
Weakness classification
- CWE-20: Improper Input Validation