The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive the pairwise master key or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0175 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-52424:
    The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended     or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an     SSID Confusion issue. This occurs because the SSID is not always used to derive the pairwise master key     or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended     or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an     SSID Confusion issue. This occurs because the SSID is not always used to derive the pairwise master key     or session keys, and because there is not a protected exchange of an SSID during a 4-way handshake.
    (CVE-2023-52424)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-0fa283c43a advisory.

    iwd 3.3:

            Fix issue with handling External Authentication.

    iwd 3.2:

            Fix issue with GCC 15 and -std=c23 build errors.
            Add support for using PMKSA over SAE if available.
            Add support for HighUtilization/StationCount thresholds.
            Add support for disabling Multicast RX option.

    ell 0.71:

            Fix issue with GCC 15 and -std=c23 build errors.

    ell 0.70:

            Add support for helper function for safe memcpy.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-256818da09 advisory.

    iwd 3.3:

            Fix issue with handling External Authentication.

    iwd 3.2:

            Fix issue with GCC 15 and -std=c23 build errors.
            Add support for using PMKSA over SAE if available.
            Add support for HighUtilization/StationCount thresholds.
            Add support for disabling Multicast RX option.

    ell 0.71:

            Fix issue with GCC 15 and -std=c23 build errors.

    ell 0.70:

            Add support for helper function for safe memcpy.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-acb9425c93 advisory.

    libell 0.69:

            Add support for getting remaining microseconds left on a timer.
            Add support for setting link MTU on a network interface.

    iwd 2.21:

            Fix issue with pending scan requests after regdom update.
            Fix issue with handling the rearming of the roaming timeout.
            Fix issue with survey request and externally triggered scans.
            Fix issue with RSSI fallback when setting CQM threshold fails.
            Fix issue with FT-over-Air without offchannel support.
            Add support for per station Affinities property.

    bluez 5.78:

            Fix issue with handling notification of scanned BISes to BASS             Fix issue with handling checking BIS caps against peer caps.
            Fix issue with handling MGMT Set Device Flags overwrites.
            Fix issue with handling ASE notification order.
            Fix issue with handling BIG Info report events.
            Fix issue with handling PACS Server role.
            Fix issue with registering UHID_START multiple times.
            Fix issue with pairing method not setting auto-connect.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-223428e702 advisory.

    libell 0.69:

            Add support for getting remaining microseconds left on a timer.
            Add support for setting link MTU on a network interface.

    iwd 2.21:

            Fix issue with pending scan requests after regdom update.
            Fix issue with handling the rearming of the roaming timeout.
            Fix issue with survey request and externally triggered scans.
            Fix issue with RSSI fallback when setting CQM threshold fails.
            Fix issue with FT-over-Air without offchannel support.
            Add support for per station Affinities property.

    bluez 5.78:

            Fix issue with handling notification of scanned BISes to BASS             Fix issue with handling checking BIS caps against peer caps.
            Fix issue with handling MGMT Set Device Flags overwrites.
            Fix issue with handling ASE notification order.
            Fix issue with handling BIG Info report events.
            Fix issue with handling PACS Server role.
            Fix issue with registering UHID_START multiple times.
            Fix issue with pairing method not setting auto-connect.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-73626281d8 advisory.

    Update to upstream version 2.11.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
239845	TencentOS Server 4: wpa_supplicant (TSSA-2025:0175)	Nessus	Tencent Local Security Checks	high
227260	Linux Distros Unpatched Vulnerability : CVE-2023-52424	Nessus	Misc.	high
213463	Fedora 40 : iwd / libell (2024-0fa283c43a)	Nessus	Fedora Local Security Checks	high
213417	Fedora 41 : iwd / libell (2024-256818da09)	Nessus	Fedora Local Security Checks	high
210991	Fedora 41 : bluez / iwd / libell (2024-acb9425c93)	Nessus	Fedora Local Security Checks	high
206950	Fedora 40 : bluez / iwd / libell (2024-223428e702)	Nessus	Fedora Local Security Checks	high
204984	Fedora 40 : hostapd / wpa_supplicant (2024-73626281d8)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2023-52424

high

Tenable Plugins

high

high

high

high

high

high

high