CVE-2017-20161

rofl0r MacGeiger ESSID macgeiger.c dump_wlan_at injection

Description

A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217188.

Category

4.6
CVSS
Severity: Medium
CVSS 3.1 •
CVSS 2.0 •
EPSS 0.03%
Third-Party Advisory github.com Third-Party Advisory vuldb.com Third-Party Advisory vuldb.com
Affected: rofl0r MacGeiger
Published at:
Updated at:

References

Link Tags
https://vuldb.com/?id.217188 third party advisory vdb entry permissions required technical description
https://vuldb.com/?ctiid.217188 signature third party advisory permissions required
https://github.com/rofl0r/MacGeiger/commit/57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb third party advisory patch

Frequently Asked Questions

What is the severity of CVE-2017-20161?
CVE-2017-20161 has been scored as a medium severity vulnerability.
How to fix CVE-2017-20161?
To fix CVE-2017-20161, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2017-20161 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2017-20161 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2017-20161?
CVE-2017-20161 affects rofl0r MacGeiger.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.