CVE-2019-18991 - CVE House
Back to Database
Status published Medium CVE-2019-18991

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8),...

Vulnerability Description

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18991

Credits & Attribution

No credits recorded in the NVD database.

References

More from qualcomm

View All →
CVE-2017-18301
In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in...
Medium 5.5
CVE-2017-17773
In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD...
Critical 9.8
CVE-2016-10490
In Android before 2018-04-05 or earlier security patch level on...
Critical 9.8
CVE-2014-10031
Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail...
High 7.5
CVE-2013-6122
goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux...
Medium 6.9

Affected Vendor

Affected Software

atheros ar9132 firmware, atheros ar9283 firmware, atheros ar9285 firmware
Vulnerable Versions:
3.60\(amx.8\), 1.85, 1.0.0.12na

Timeline

Official Publish: September 30th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.