CVE-2022-37660
CVE-2022-37660 is a medium-severity vulnerability in W1.fi Hostapd with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-323.
Key facts
- Severity: Medium (CVSS 3.x base score 6.5)
- EPSS exploit prediction: 0% (26th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2022-40274
- Weakness: CWE-323
- Affected product: W1.fi Hostapd
- Published:
- Last modified:
Description
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.
Frequently asked questions
- What is CVE-2022-37660?
- In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.
- How severe is CVE-2022-37660?
- CVE-2022-37660 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.
- Is CVE-2022-37660 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2022-37660?
- CVE-2022-37660 affects W1.fi Hostapd. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2022-37660?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2022-37660 have an EU (EUVD) identifier?
- Yes. CVE-2022-37660 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2022-40274.
- When was CVE-2022-37660 published?
- CVE-2022-37660 was published on 2025-02-11 and last updated on 2026-06-17.
References
- https://link.springer.com/article/10.1007/s10207-025-00988-3
- https://w1.fi/cgit/hostap/commit/?id=15af83cf1846870873a011ed4d714732f01cd2e4
- https://lists.debian.org/debian-lts-announce/2025/04/msg00019.html
Affected products (1)
- cpe:2.3:a:w1.fi:hostapd:*:*:*:*:*:*:*:*
More vulnerabilities in W1.fi Hostapd
- CVE-2022-23304 — Critical (CVSS 9.8): The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel…
- CVE-2022-23303 — Critical (CVSS 9.8): The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks…
- CVE-2019-9499 — High (CVSS 8.1): The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit…
- CVE-2019-9498 — High (CVSS 8.1): The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation…
- CVE-2019-9497 — High (CVSS 8.1): The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element…
- CVE-2017-13082 — High (CVSS 8.1): Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key…
All CVEs affecting W1.fi Hostapd →
Other CWE-323 vulnerabilities
- CVE-2026-59099 — Critical (CVSS 9.1): Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers…
- CVE-2026-12205 — Critical (CVSS 9.1): Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key…
- CVE-2026-49952 — Critical (CVSS 9.1): Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows…
- CVE-2025-64767 — Critical (CVSS 9.1): hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5,…
- CVE-2025-47345 — High (CVSS 8.4): Cryptographic issue may occur while encrypting license data.
- CVE-2026-3559 — High (CVSS 8.1): Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability…