The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-38faa9a2a8 advisory.

  - The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before     2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete     the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with an all-zero key. (CVE-2023-52161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 38 : iwd / libell (2024-38faa9a2a8)

high Nessus Plugin ID 191730