| CVE-2010-4648 | Date: (C)2012-06-21 (M)2024-02-22 |
The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V2 Severity: |
| CVSS Score : 3.3 |
| Exploit Score: 6.5 |
| Impact Score: 2.9 |
| |
| CVSS V2 Metrics: |
| Access Vector: ADJACENT_NETWORK |
| Access Complexity: LOW |
| Authentication: NONE |
| Confidentiality: PARTIAL |
| Integrity: NONE |
| Availability: NONE |
| | |
