Lucene search

[email protected]NVD:CVE-2020-24588

HistoryMay 11, 2021 - 8:15 p.m.

CVE-2020-24588

2021-05-1120:15:08

CWE-327

[email protected]

web.nvd.nist.gov

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:N/I:P/A:N

3.5 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

0.002 Low

EPSS

Percentile

65.1%

JSON

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

Affected configurations

NVD

Node

ieeeieee_802.11

linuxmac80211Match-

Node

microsoftwindows_10Match-

microsoftwindows_10Match20h2

microsoftwindows_10Match1607

microsoftwindows_10Match1803

microsoftwindows_10Match1809

microsoftwindows_10Match1909

microsoftwindows_10Match2004

microsoftwindows_7Match-sp1

microsoftwindows_8.1Match-

microsoftwindows_rt_8.1Match-

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Match-r2

microsoftwindows_server_2016Match-

microsoftwindows_server_2016Match2004

microsoftwindows_server_2019Match-

Node

debiandebian_linuxMatch9.0

Node

siemensscalance_w1748-1_firmwareMatch-m12

AND

siemensscalance_w1748-1Match-m12

Node

siemensscalance_w1750d_firmwareMatch-

AND

siemensscalance_w1750dMatch-

Node

siemensscalance_w1788-1_firmwareMatch-m12

AND

siemensscalance_w1788-1Match-m12

Node

siemensscalance_w1788-2_firmwareMatch-eec_m12

AND

siemensscalance_w1788-2Match-eec_m12

Node

siemensscalance_w1788-2_firmwareMatch-m12

AND

siemensscalance_w1788-2Match-m12

Node

siemensscalance_w1788-2ia_firmwareMatch-m12

AND

siemensscalance_w1788-2iaMatch-m12

Node

siemensscalance_w721-1_firmwareMatch-rj45

AND

siemensscalance_w721-1Match-rj45

Node

siemensscalance_w722-1_firmwareMatch-rj45

AND

siemensscalance_w722-1Match-rj45

Node

siemensscalance_w734-1_firmwareMatch-rj45

AND

siemensscalance_w734-1Match-rj45

Node

siemensscalance_w738-1_firmwareMatch-m12

AND

siemensscalance_w738-1Match-m12

Node

siemensscalance_w748-1_firmwareMatch-m12

AND

siemensscalance_w748-1Match-m12

Node

siemensscalance_w748-1_firmwareMatch-rj45

AND

siemensscalance_w748-1Match-rj45

Node

siemensscalance_w761-1_firmwareMatch-rj45

AND

siemensscalance_w761-1Match-rj45

Node

siemensscalance_w774-1_firmwareMatch-m12_eec

AND

siemensscalance_w774-1Match-m12_eec

Node

siemensscalance_w774-1_firmwareMatch-rj45

AND

siemensscalance_w774-1Match-rj45

Node

siemensscalance_w778-1_firmwareMatch-m12

AND

siemensscalance_w778-1Match-m12

Node

siemensscalance_w778-1_firmwareMatch-m12_eec

AND

siemensscalance_w778-1Match-m12_eec

Node

siemensscalance_w786-1_firmwareMatch-rj45

AND

siemensscalance_w786-1Match-rj45

Node

siemensscalance_w786-2_firmwareMatch-rj45

AND

siemensscalance_w786-2Match-rj45

Node

siemensscalance_w786-2_firmwareMatch-sfp

AND

siemensscalance_w786-2Match-sfp

Node

siemensscalance_w786-2ia_firmwareMatch-rj45

AND

siemensscalance_w786-2iaMatch-rj45

Node

siemensscalance_w788-1_firmwareMatch-m12

AND

siemensscalance_w788-1Match-m12

Node

siemensscalance_w788-1_firmwareMatch-rj45

AND

siemensscalance_w788-1Match-rj45

Node

siemensscalance_w788-2_firmwareMatch-m12

AND

siemensscalance_w788-2Match-m12

Node

siemensscalance_w788-2_firmwareMatch-m12_eec

AND

siemensscalance_w788-2Match-m12_eec

Node

siemensscalance_w788-2_firmwareMatch-rj45

AND

siemensscalance_w788-2Match-rj45

Node

siemensscalance_wam763-1_firmwareMatch-

AND

siemensscalance_wam763-1Match-

Node

siemensscalance_wam766-1_firmwareMatch-

AND

siemensscalance_wam766-1Match-

Node

siemensscalance_wam766-1_firmwareMatch-eec

AND

siemensscalance_wam766-1Match-eec

Node

siemensscalance_wam766-1_6ghz_firmwareMatch-

AND

siemensscalance_wam766-1_6ghzMatch-

Node

siemensscalance_wam766-1_6ghz_firmwareMatch-eec

AND

siemensscalance_wam766-1_6ghzMatch-eec

Node

siemensscalance_wum763-1_firmwareMatch-

AND

siemensscalance_wum763-1Match-

Node

siemensscalance_wum766-1_firmwareMatch-

AND

siemensscalance_wum766-1Match-

Node

siemensscalance_wum766-1_6ghz_firmwareMatch-

AND

siemensscalance_wum766-1_6ghzMatch-

Node

aristac-100_firmwareMatch-

AND

aristac-100Match-

Node

aristac-110_firmwareMatch-

AND

aristac-110Match-

Node

aristac-120_firmwareMatch-

AND

aristac-120Match-

Node

aristac-130_firmwareMatch-

AND

aristac-130Match-

Node

aristac-200_firmwareMatch-

AND

aristac-200Match-

Node

aristac-230_firmwareMatch-

AND

aristac-230Match-

Node

aristac-235_firmwareMatch-

AND

aristac-235Match-

Node

aristac-250_firmwareMatch-

AND

aristac-250Match-

Node

aristac-260_firmwareMatch-

AND

aristac-260Match-

Node

aristac-65_firmwareMatch-

AND

aristac-65Match-

Node

aristac-75_firmwareMatch-

AND

aristac-75Match-

Node

aristao-105_firmwareMatch-

AND

aristao-105Match-

Node

aristao-90_firmwareMatch-

AND

aristao-90Match-

Node

aristaw-118_firmwareMatch-

AND

aristaw-118Match-

Node

aristaw-68_firmwareMatch-

AND

aristaw-68Match-

Node

cisco1100_firmwareMatch-

AND

cisco1100Match-

Node

cisco1100-4p_firmwareMatch-

AND

cisco1100-4pMatch-

Node

cisco1100-8p_firmwareMatch-

AND

cisco1100-8pMatch-

Node

cisco1101-4p_firmwareMatch-

AND

cisco1101-4pMatch-

Node

cisco1109-2p_firmwareMatch-

AND

cisco1109-2pMatch-

Node

cisco1109-4p_firmwareMatch-

AND

cisco1109-4pMatch-

Node

ciscoaironet_1532_firmwareMatch-

AND

ciscoaironet_1532Match-

Node

ciscoaironet_1542d_firmwareMatch-

AND

ciscoaironet_1542dMatch-

Node

ciscoaironet_1542i_firmwareMatch-

AND

ciscoaironet_1542iMatch-

Node

ciscoaironet_1800_firmwareMatch-

AND

ciscoaironet_1800Match-

Node

ciscoaironet_1800i_firmwareMatch-

AND

ciscoaironet_1800iMatch-

Node

ciscoaironet_1810_firmwareMatch-

AND

ciscoaironet_1810Match-

Node

ciscoaironet_1810w_firmwareMatch-

AND

ciscoaironet_1810wMatch-

Node

ciscoaironet_1815_firmwareMatch-

AND

ciscoaironet_1815Match-

Node

ciscoaironet_1815i_firmwareMatch-

AND

ciscoaironet_1815iMatch-

Node

ciscoaironet_1832_firmwareMatch-

AND

ciscoaironet_1832Match-

Node

ciscoaironet_1842_firmwareMatch-

AND

ciscoaironet_1842Match-

Node

ciscoaironet_1852_firmwareMatch-

AND

ciscoaironet_1852Match-

Node

ciscoaironet_ap803_firmwareMatch-

AND

ciscoaironet_ap803Match-

Node

ciscoaironet_iw3702_firmwareMatch-

AND

ciscoaironet_iw3702Match-

Node

ciscocatalyst_9105_firmwareMatch-

AND

ciscocatalyst_9105Match-

Node

ciscocatalyst_9105axi_firmwareMatch-

AND

ciscocatalyst_9105axiMatch-

Node

ciscocatalyst_9105axw_firmwareMatch-

AND

ciscocatalyst_9105axwMatch-

Node

ciscocatalyst_9115_firmwareMatch-

AND

ciscocatalyst_9115Match-

Node

ciscocatalyst_9115_ap_firmwareMatch-

AND

ciscocatalyst_9115_apMatch-

Node

ciscocatalyst_9115axe_firmwareMatch-

AND

ciscocatalyst_9115axeMatch-

Node

ciscocatalyst_9115axi_firmwareMatch-

AND

ciscocatalyst_9115axiMatch-

Node

ciscocatalyst_9117_firmwareMatch-

AND

ciscocatalyst_9117Match-

Node

ciscocatalyst_9117_ap_firmwareMatch-

AND

ciscocatalyst_9117_apMatch-

Node

ciscocatalyst_9117axi_firmwareMatch-

AND

ciscocatalyst_9117axiMatch-

Node

ciscocatalyst_9120_firmwareMatch-

AND

ciscocatalyst_9120Match-

Node

ciscocatalyst_9120_ap_firmwareMatch-

AND

ciscocatalyst_9120_apMatch-

Node

ciscocatalyst_9120axe_firmwareMatch-

AND

ciscocatalyst_9120axeMatch-

Node

ciscocatalyst_9120axi_firmwareMatch-

AND

ciscocatalyst_9120axiMatch-

Node

ciscocatalyst_9120axp_firmwareMatch-

AND

ciscocatalyst_9120axpMatch-

Node

ciscocatalyst_9124_firmwareMatch-

AND

ciscocatalyst_9124Match-

Node

ciscocatalyst_9124axd_firmwareMatch-

AND

ciscocatalyst_9124axdMatch-

Node

ciscocatalyst_9124axi_firmwareMatch-

AND

ciscocatalyst_9124axiMatch-

Node

ciscocatalyst_9130_firmwareMatch-

AND

ciscocatalyst_9130Match-

Node

ciscocatalyst_9130_ap_firmwareMatch-

AND

ciscocatalyst_9130_apMatch-

Node

ciscocatalyst_9130axe_firmwareMatch-

AND

ciscocatalyst_9130axeMatch-

Node

ciscocatalyst_9130axi_firmwareMatch-

AND

ciscocatalyst_9130axiMatch-

Node

ciscoip_phone_6861_firmwareMatch-

AND

ciscoip_phone_6861Match-

Node

ciscoip_phone_8821_firmwareMatch-

AND

ciscoip_phone_8821Match-

Node

ciscoip_phone_8832_firmwareMatch-

AND

ciscoip_phone_8832Match-

Node

ciscoip_phone_8861_firmwareMatch-

AND

ciscoip_phone_8861Match-

Node

ciscoip_phone_8865_firmwareMatch-

AND

ciscoip_phone_8865Match-

Node

ciscoir829-2lte-ea-ak9_firmwareMatch-

AND

ciscoir829-2lte-ea-ak9Match-

Node

ciscoir829-2lte-ea-bk9_firmwareMatch-

AND

ciscoir829-2lte-ea-bk9Match-

Node

ciscoir829-2lte-ea-ek9_firmwareMatch-

AND

ciscoir829-2lte-ea-ek9Match-

Node

ciscoir829gw-lte-ga-ck9_firmwareMatch-

AND

ciscoir829gw-lte-ga-ck9Match-

Node

ciscoir829gw-lte-ga-ek9_firmwareMatch-

AND

ciscoir829gw-lte-ga-ek9Match-

Node

ciscoir829gw-lte-ga-sk9_firmwareMatch-

AND

ciscoir829gw-lte-ga-sk9Match-

Node

ciscoir829gw-lte-ga-zk9_firmwareMatch-

AND

ciscoir829gw-lte-ga-zk9Match-

Node

ciscoir829gw-lte-na-ak9_firmwareMatch-

AND

ciscoir829gw-lte-na-ak9Match-

Node

ciscoir829gw-lte-vz-ak9_firmwareMatch-

AND

ciscoir829gw-lte-vz-ak9Match-

Node

ciscomeraki_gr10_firmwareMatch-

AND

ciscomeraki_gr10Match-

Node

ciscomeraki_gr60_firmwareMatch-

AND

ciscomeraki_gr60Match-

Node

ciscomeraki_mr12_firmwareMatch-

AND

ciscomeraki_mr12Match-

Node

ciscomeraki_mr20_firmwareMatch-

AND

ciscomeraki_mr20Match-

Node

ciscomeraki_mr26_firmwareMatch-

AND

ciscomeraki_mr26Match-

Node

ciscomeraki_mr30h_firmwareMatch-

AND

ciscomeraki_mr30hMatch-

Node

ciscomeraki_mr32_firmwareMatch-

AND

ciscomeraki_mr32Match-

Node

ciscomeraki_mr33_firmwareMatch-

AND

ciscomeraki_mr33Match-

Node

ciscomeraki_mr34_firmwareMatch-

AND

ciscomeraki_mr34Match-

Node

ciscomeraki_mr36_firmwareMatch-

AND

ciscomeraki_mr36Match-

Node

ciscomeraki_mr42_firmwareMatch-

AND

ciscomeraki_mr42Match-

Node

ciscomeraki_mr42e_firmwareMatch-

AND

ciscomeraki_mr42eMatch-

Node

ciscomeraki_mr44_firmwareMatch-

AND

ciscomeraki_mr44Match-

Node

ciscomeraki_mr45_firmwareMatch-

AND

ciscomeraki_mr45Match-

Node

ciscomeraki_mr46_firmwareMatch-

AND

ciscomeraki_mr46Match-

Node

ciscomeraki_mr46e_firmwareMatch-

AND

ciscomeraki_mr46eMatch-

Node

ciscomeraki_mr52_firmwareMatch-

AND

ciscomeraki_mr52Match-

Node

ciscomeraki_mr53_firmwareMatch-

AND

ciscomeraki_mr53Match-

Node

ciscomeraki_mr53e_firmwareMatch-

AND

ciscomeraki_mr53eMatch-

Node

ciscomeraki_mr55_firmwareMatch-

AND

ciscomeraki_mr55Match-

Node

ciscomeraki_mr56_firmwareMatch-

AND

ciscomeraki_mr56Match-

Node

ciscomeraki_mr62_firmwareMatch-

AND

ciscomeraki_mr62Match-

Node

ciscomeraki_mr66_firmwareMatch-

AND

ciscomeraki_mr66Match-

Node

ciscomeraki_mr70_firmwareMatch-

AND

ciscomeraki_mr70Match-

Node

ciscomeraki_mr72_firmwareMatch-

AND

ciscomeraki_mr72Match-

Node

ciscomeraki_mr74_firmwareMatch-

AND

ciscomeraki_mr74Match-

Node

ciscomeraki_mr76_firmwareMatch-

AND

ciscomeraki_mr76Match-

Node

ciscomeraki_mr84_firmwareMatch-

AND

ciscomeraki_mr84Match-

Node

ciscomeraki_mr86_firmwareMatch-

AND

ciscomeraki_mr86Match-

Node

ciscomeraki_mx64w_firmwareMatch-

AND

ciscomeraki_mx64wMatch-

Node

ciscomeraki_mx65w_firmwareMatch-

AND

ciscomeraki_mx65wMatch-

Node

ciscomeraki_mx67cw_firmwareMatch-

AND

ciscomeraki_mx67cwMatch-

Node

ciscomeraki_mx67w_firmwareMatch-

AND

ciscomeraki_mx67wMatch-

Node

ciscomeraki_mx68cw_firmwareMatch-

AND

ciscomeraki_mx68cwMatch-

Node

ciscomeraki_mx68w_firmwareMatch-

AND

ciscomeraki_mx68wMatch-

Node

ciscomeraki_z3_firmwareMatch-

AND

ciscomeraki_z3Match-

Node

ciscomeraki_z3c_firmwareMatch-

AND

ciscomeraki_z3cMatch-

Node

ciscowebex_board_55_firmwareMatch-

AND

ciscowebex_board_55Match-

Node

ciscowebex_board_55s_firmwareMatch-

AND

ciscowebex_board_55sMatch-

Node

ciscowebex_board_70_firmwareMatch-

AND

ciscowebex_board_70Match-

Node

ciscowebex_board_70s_firmwareMatch-

AND

ciscowebex_board_70sMatch-

Node

ciscowebex_board_85s_firmwareMatch-

AND

ciscowebex_board_85sMatch-

Node

ciscowebex_dx70_firmwareMatch-

AND

ciscowebex_dx70Match-

Node

ciscowebex_dx80_firmwareMatch-

AND

ciscowebex_dx80Match-

Node

ciscowebex_room_55_firmwareMatch-

AND

ciscowebex_room_55Match-

Node

ciscowebex_room_55_dual_firmwareMatch-

AND

ciscowebex_room_55_dualMatch-

Node

ciscowebex_room_70_firmwareMatch-

AND

ciscowebex_room_70Match-

Node

ciscowebex_room_70_dual_firmwareMatch-

AND

ciscowebex_room_70_dualMatch-

Node

ciscowebex_room_70_dual_g2_firmwareMatch-

AND

ciscowebex_room_70_dual_g2Match-

Node

ciscowebex_room_70_single_firmwareMatch-

AND

ciscowebex_room_70_singleMatch-

Node

ciscowebex_room_70_single_g2_firmwareMatch-

AND

ciscowebex_room_70_single_g2Match-

Node

ciscowebex_room_kit_firmwareMatch-

AND

ciscowebex_room_kitMatch-

Node

ciscowebex_room_kit_mini_firmwareMatch-

AND

ciscowebex_room_kit_miniMatch-

Node

intelac_8260_firmwareMatch-

AND

intelac_8260Match-

Node

intelac_8265_firmwareMatch-

AND

intelac_8265Match-

Node

intelac_9260_firmwareMatch-

AND

intelac_9260Match-

Node

intelac_9560_firmwareMatch-

AND

intelac_9560Match-

Node

intelkiller_ac_1550_firmwareMatch-

AND

intelkiller_ac_1550Match-

Node

intelkiller_wi-fi_6_ax1650_firmwareMatch-

AND

intelkiller_wi-fi_6_ax1650Match-

Node

intelkiller_wi-fi_6e_ax1675_firmwareMatch-

AND

intelkiller_wi-fi_6e_ax1675Match-

Node

intelproset_ac_3165_firmwareMatch-

AND

intelproset_ac_3165Match-

Node

intelproset_ac_3168_firmwareMatch-

AND

intelproset_ac_3168Match-

Node

intelproset_ac_8260_firmwareMatch-

AND

intelproset_ac_8260Match-

Node

intelproset_ac_8265_firmwareMatch-

AND

intelproset_ac_8265Match-

Node

intelproset_ac_9260_firmwareMatch-

AND

intelproset_ac_9260Match-

Node

intelproset_ac_9461_firmwareMatch-

AND

intelproset_ac_9461Match-

Node

intelproset_ac_9462_firmwareMatch-

AND

intelproset_ac_9462Match-

Node

intelproset_ac_9560_firmwareMatch-

AND

intelproset_ac_9560Match-

Node

intelproset_wi-fi_6_ax200_firmwareMatch-

AND

intelproset_wi-fi_6_ax200Match-

Node

intelproset_wi-fi_6_ax201_firmwareMatch-

AND

intelproset_wi-fi_6_ax201Match-

Node

intelproset_wi-fi_6e_ax210_firmwareMatch-

AND

intelproset_wi-fi_6e_ax210Match-

Node

intelproset_wireless_7265_\(rev_d\)_firmwareMatch-

AND

intelproset_wireless_7265_\(rev_d\)Match-

Node

intelwi-fi_6_ax200_firmwareMatch-

AND

intelwi-fi_6_ax200Match-

Node

intelwi-fi_6_ax201_firmwareMatch-

AND

intelwi-fi_6_ax201Match-

Node

linuxlinux_kernelRange4.4.0–4.4.271

linuxlinux_kernelRange4.9.0–4.9.271

linuxlinux_kernelRange4.14–4.14.235

linuxlinux_kernelRange4.19–4.19.193

linuxlinux_kernelRange5.4–5.4.124

linuxlinux_kernelRange5.10–5.10.42

linuxlinux_kernelRange5.12–5.12.9

References

www.openwall.com/lists/oss-security/2021/05/11/12

cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf

github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

lists.debian.org/debian-lts-announce/2021/06/msg00019.html

lists.debian.org/debian-lts-announce/2021/06/msg00020.html

lists.debian.org/debian-lts-announce/2023/04/msg00002.html

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu

www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

www.fragattacks.com

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:N/I:P/A:N

3.5 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

0.002 Low

EPSS

Percentile

65.1%

JSON

CVE-2020-24588

Affected configurations

References

Related