CVE-2006-0376 in the critical feed json
The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user…
published 2006-01-22 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0383
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 18.2%
- EPSS 18.2% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association with a station in ad hoc (aka peer-to-peer) mode or (2) a station in ad hoc mode establishes an association with it, which allows remote attackers to put unexpected wireless communication into place.
Exploit prediction
18.25% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
nmrc.org
/pub/advise/20060114.txt
vendor-advisory
- theta44.org /karma/
-
securitytracker.com
/id?1015489
vdb-entry
-
securityreason.com
/securityalert/349
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24157
vdb-entry
- securiteam.com /windowsntfocus/5YP0D2KHHO.html
-
securityfocus.com
/archive/1/421868/100/0/threaded
mailing-list
Sources
- CVE List CVE-2006-0376
- NVD CVE-2006-0376
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.