I apologise if this is a silly question, I just want to make sure I understand the impact of CVE-2017-13078 and CVE-2017-13080 correctly. Is the following assumption true?
If there is just one client on a Wi-Fi network that is vulnerable to above mentioned CVEs then the attacker may exploit that vulnerability and as a result any client on that network (and not just the vulnerable client) may be attacked with broadcast/multicast frames being replayed.
The KRACK white paper lists NTP UDP broadcasts as a possible example for an impact scenario.
Thank you for your answers!