Lucene search

[email protected]CVE-2020-26141

HistoryMay 11, 2021 - 8:15 p.m.

CVE-2020-26141

2021-05-1120:15:08

CWE-354

[email protected]

web.nvd.nist.gov

360

alfa

windows 10

driver

wi-fi

packet injection

decryption

wpa

wpa2

vulnerability

cve-2020-26141

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

61.2%

JSON

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

Affected configurations

NVD

Node

alfaawus036h_firmwareMatch6.1316.1209windows_10

AND

alfaawus036hMatch-

Node

ciscomeraki_gr10_firmwareRange<27.7.1

AND

ciscomeraki_gr10Match-

Node

ciscomeraki_gr60_firmwareRange<27.7.1

AND

ciscomeraki_gr60Match-

Node

ciscomeraki_mr20_firmwareRange<27.7.1

AND

ciscomeraki_mr20Match-

Node

ciscomeraki_mr30h_firmwareRange<27.7.1

AND

ciscomeraki_mr30hMatch-

Node

ciscomeraki_mr33_firmwareRange<27.7.1

AND

ciscomeraki_mr33Match-

Node

ciscomeraki_mr36_firmwareRange<27.7.1

AND

ciscomeraki_mr36Match-

Node

ciscomeraki_mr42_firmwareRange<27.7.1

AND

ciscomeraki_mr42Match-

Node

ciscomeraki_mr42e_firmwareRange<27.7.1

AND

ciscomeraki_mr42eMatch-

Node

ciscomeraki_mr44_firmwareRange<27.7.1

AND

ciscomeraki_mr44Match-

Node

ciscomeraki_mr45_firmwareRange<27.7.1

AND

ciscomeraki_mr45Match-

Node

ciscomeraki_mr46_firmwareRange<27.7.1

AND

ciscomeraki_mr46Match-

Node

ciscomeraki_mr46e_firmwareRange<27.7.1

AND

ciscomeraki_mr46eMatch-

Node

ciscomeraki_mr52_firmwareRange<27.7.1

AND

ciscomeraki_mr52Match-

Node

ciscomeraki_mr53_firmwareRange<27.7.1

AND

ciscomeraki_mr53Match-

Node

ciscomeraki_mr53e_firmwareRange<27.7.1

AND

ciscomeraki_mr53eMatch-

Node

ciscomeraki_mr55_firmwareRange<27.7.1

AND

ciscomeraki_mr55Match-

Node

ciscomeraki_mr56_firmwareRange<27.7.1

AND

ciscomeraki_mr56Match-

Node

ciscomeraki_mr70_firmwareRange<27.7.1

AND

ciscomeraki_mr70Match-

Node

ciscomeraki_mr74_firmwareRange<27.7.1

AND

ciscomeraki_mr74Match-

Node

ciscomeraki_mr76_firmwareRange<27.7.1

AND

ciscomeraki_mr76Match-

Node

ciscomeraki_mr84_firmwareRange<27.7.1

AND

ciscomeraki_mr84Match-

Node

ciscomeraki_mr86_firmwareRange<27.7.1

AND

ciscomeraki_mr86Match-

Node

ciscomeraki_mr12_firmwareRange<26.8.3

AND

ciscomeraki_mr12Match-

Node

ciscomeraki_mr18_firmwareRange<26.8.3

AND

ciscomeraki_mr18Match-

Node

ciscomeraki_mr26_firmwareRange<26.8.3

AND

ciscomeraki_mr26Match-

Node

ciscomeraki_mr32_firmwareRange<26.8.3

AND

ciscomeraki_mr32Match-

Node

ciscomeraki_mr34_firmwareRange<26.8.3

AND

ciscomeraki_mr34Match-

Node

ciscomeraki_mr62_firmwareRange<26.8.3

AND

ciscomeraki_mr62Match-

Node

ciscomeraki_mr66_firmwareRange<26.8.3

AND

ciscomeraki_mr66Match-

Node

ciscomeraki_mr72_firmwareRange<26.8.3

AND

ciscomeraki_mr72Match-

Node

ciscomeraki_mx64w_firmwareRange<17.0

AND

ciscomeraki_mx64wMatch-

Node

ciscomeraki_mx65w_firmwareRange<17.0

AND

ciscomeraki_mx65wMatch-

Node

ciscomeraki_mx67w_firmwareRange<17.0

AND

ciscomeraki_mx67wMatch-

Node

ciscomeraki_mx67cw_firmwareRange<17.0

AND

ciscomeraki_mx67cwMatch-

Node

ciscomeraki_mx68w_firmwareRange<17.0

AND

ciscomeraki_mx68wMatch-

Node

ciscomeraki_mx68cw_firmwareRange<17.0

AND

ciscomeraki_mx68cwMatch-

Node

ciscomeraki_z3_firmwareRange<17.0

AND

ciscomeraki_z3Match-

Node

ciscomeraki_z3c_firmwareRange<17.0

AND

ciscomeraki_z3cMatch-

Node

ciscowireless_ip_phone_8821_firmwareRange<11.0\(6\)sr2

AND

ciscowireless_ip_phone_8821Match-

Node

ciscoip_phone_6861_firmwareRange<11.3\(5\)

AND

ciscoip_phone_6861Match-

Node

ciscoip_phone_8861_firmwareRange<11.3\(5\)3pcc

AND

ciscoip_phone_8861Match-3pcc

Node

ciscoip_phone_8861_firmwareRange<14.1\(1\)

AND

ciscoip_phone_8861Match-

Node

ciscoip_phone_8865_firmwareRange<14.1\(1\)

AND

ciscoip_phone_8865Match-

Node

ciscoip_conference_phone_8832_firmwareRange<14.1\(1\)

AND

ciscoip_conference_phone_8832Match-

Node

ciscowebex_room_series_firmwareRange<1.2\(0\)sr1

AND

ciscowebex_room_seriesMatch-

Node

ciscowebex_desk_series_firmwareRange<1.2\(0\)sr1

AND

ciscowebex_desk_seriesMatch-

Node

ciscowebex_board_series_firmwareRange<10.8.2.5

AND

ciscowebex_board_seriesMatch-

Node

ciscowebex_wireless_phone_860_firmwareRange<1.4\(0\)

AND

ciscowebex_wireless_phone_860Match-

Node

ciscowebex_wireless_phone_840_firmwareRange<1.4\(0\)

AND

ciscowebex_wireless_phone_840Match-

Node

siemens6gk5778-1gy00-0ab0_firmwareMatch-m12

AND

siemens6gk5778-1gy00-0ab0Match-m12

Node

siemens6gk5778-1gy00-0aa0_firmwareMatch-m12

AND

siemens6gk5778-1gy00-0aa0Match-m12

Node

siemens6gk5721-1fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5721-1fc00-0aa0Match-rj45

Node

siemens6gk5721-1fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5721-1fc00-0ab0Match-rj45

Node

siemens6gk5722-1fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5722-1fc00-0aa0Match-rj45

Node

siemens6gk5722-1fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5722-1fc00-0ab0Match-rj45

Node

siemens6gk5722-1fc00-0ac0_firmwareMatch-rj45

AND

siemens6gk5722-1fc00-0ac0Match-rj45

Node

siemens6gk5734-1fx00-0aa0_firmwareMatch-rj45

AND

siemens6gk5734-1fx00-0aa0Match-rj45

Node

siemens6gk5734-1fx00-0aa6_firmwareMatch-rj45

AND

siemens6gk5734-1fx00-0aa6Match-rj45

Node

siemens6gk5734-1fx00-0ab0_firmwareMatch-rj45

AND

siemens6gk5734-1fx00-0ab0Match-rj45

Node

siemens6gk5734-1fx00-0ab6_firmwareMatch-rj45

AND

siemens6gk5734-1fx00-0ab6Match-rj45

Node

siemens6gk5738-1gy00-0aa0_firmwareMatch-m12

AND

siemens6gk5738-1gy00-0aa0Match-m12

Node

siemens6gk5738-1gy00-0ab0_firmwareMatch-m12

AND

siemens6gk5738-1gy00-0ab0Match-m12

Node

siemens6gk5748-1fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5748-1fc00-0aa0Match-rj45

Node

siemens6gk5748-1fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5748-1fc00-0ab0Match-rj45

Node

siemens6gk5748-1gd00-0aa0_firmwareMatch-m12

AND

siemens6gk5748-1gd00-0aa0Match-m12

Node

siemens6gk5748-1gd00-0ab0_firmwareMatch-m12

AND

siemens6gk5748-1gd00-0ab0Match-m12

Node

siemens6gk5761-1fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5761-1fc00-0aa0Match-rj45

Node

siemens6gk5761-1fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5761-1fc00-0ab0Match-rj45

Node

siemens6gk5774-1fx00-0aa0_firmwareMatch-rj45

AND

siemens6gk5774-1fx00-0aa0Match-rj45

Node

siemens6gk5774-1fx00-0aa6_firmwareMatch-rj45

AND

siemens6gk5774-1fx00-0aa6Match-rj45

Node

siemens6gk5774-1fx00-0ab0_firmwareMatch-rj45

AND

siemens6gk5774-1fx00-0ab0Match-rj45

Node

siemens6gk5774-1fx00-0ab6_firmwareMatch-rj45

AND

siemens6gk5774-1fx00-0ab6Match-rj45

Node

siemens6gk5774-1fy00-0ta0_firmwareMatch-m12_ecc

AND

siemens6gk5774-1fy00-0ta0Match-m12_ecc

Node

siemens6gk5774-1fy00-0tb0_firmwareMatch-m12_ecc

AND

siemens6gk5774-1fy00-0tb0Match-m12_ecc

Node

siemens6gk5778-1gy00-0ta0_firmwareMatch-m12_ecc

AND

siemens6gk5778-1gy00-0ta0Match-m12_ecc

Node

siemens6gk5778-1gy00-0tb0_firmwareMatch-m12_ecc

AND

siemens6gk5778-1gy00-0tb0Match-m12_ecc

Node

siemens6gk5786-1fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5786-1fc00-0aa0Match-rj45

Node

siemens6gk5786-1fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5786-1fc00-0ab0Match-rj45

Node

siemens6gk5786-2fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5786-2fc00-0aa0Match-rj45

Node

siemens6gk5786-2fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5786-2fc00-0ab0Match-rj45

Node

siemens6gk5786-2fc00-0ac0_firmwareMatch-rj45

AND

siemens6gk5786-2fc00-0ac0Match-rj45

Node

siemens6gk5786-2hc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5786-2hc00-0aa0Match-rj45

Node

siemens6gk5786-2hc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5786-2hc00-0ab0Match-rj45

Node

siemens6gk5788-1fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5788-1fc00-0aa0Match-rj45

Node

siemens6gk5788-1fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5788-1fc00-0ab0Match-rj45

Node

siemens6gk5788-1gd00-0aa0_firmwareMatch-m12

AND

siemens6gk5788-1gd00-0aa0Match-m12

Node

siemens6gk5788-1gd00-0ab0_firmwareMatch-m12

AND

siemens6gk5788-1gd00-0ab0Match-m12

Node

siemens6gk5788-2fc00-0aa0_firmwareMatch-rj45

AND

siemens6gk5788-2fc00-0aa0Match-rj45

Node

siemens6gk5788-2fc00-0ab0_firmwareMatch-rj45

AND

siemens6gk5788-2fc00-0ab0Match-rj45

Node

siemens6gk5788-2fc00-0ac0_firmwareMatch-rj45

AND

siemens6gk5788-2fc00-0ac0Match-rj45

Node

siemens6gk5788-2gd00-0aa0_firmwareMatch-m12

AND

siemens6gk5788-2gd00-0aa0Match-m12

Node

siemens6gk5788-2gd00-0ab0_firmwareMatch-m12

AND

siemens6gk5788-2gd00-0ab0Match-m12

Node

siemens6gk5788-2gd00-0ta0_firmwareMatch-m12_ecc

AND

siemens6gk5788-2gd00-0ta0Match-m12_ecc

Node

siemens6gk5788-2gd00-0tb0_firmwareMatch-m12_ecc

AND

siemens6gk5788-2gd00-0tb0Match-m12_ecc

Node

siemens6gk5788-2gd00-0tc0_firmwareMatch-m12_ecc

AND

siemens6gk5788-2gd00-0tc0Match-m12_ecc

VendorProductVersionCPE
alfaawus036h_firmware6.1316.1209cpe:/o:alfa:awus036h_firmware:6.1316.1209:::

Vendor	Product	Version	CPE
alfa	awus036h_firmware	6.1316.1209	cpe:/o:alfa:awus036h_firmware:6.1316.1209:::

References

www.openwall.com/lists/oss-security/2021/05/11/12

cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf

github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu

www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

www.fragattacks.com

Social References

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

61.2%

JSON

CVE-2020-26141

Affected configurations

References

Social References

Related