CyberRota Analysis
AI-GeneratedOpenBSD versions prior to a specific commit contain an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function, allowing unauthenticated attackers within RF range to exploit this flaw. By sending two malformed TKIP frames, attackers can trigger a denial of service, deauthenticating all associated TKIP stations and preventing reassociation for up to 90 seconds. Network administrators using OpenBSD should prioritize this vulnerability to mitigate potential disruptions in wireless connectivity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by more than 60 seconds. Attackers can exploit the reversed TKIP MIC failure countermeasure window check to deauthenticate all associated TKIP stations and block reassociation for up to 90 seconds, while within-window MIC failures that should engage countermeasures are silently discarded, leaving key-recovery attempts undetected.