CVE-2020-26145

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second or subsequent broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets...

DEBIAN-CVE-2020-24586

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received fragments be cleared from memory after reconnecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using...

CVE-2020-26142

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration...

CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames...

CVE-2020-24588

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames which is mandatory as part of 802.11...

UBUNTU-CVE-2020-24586

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received fragments be cleared from memory after reconnecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using...

UBUNTU-CVE-2020-24587

The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and...

CVE-2020-20265

Mikrotik RouterOs before 6.47 stable tree suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of Service due via a crafted packet...

Windows Wireless Networking Spoofing Vulnerability

...

Windows Wireless Networking Information Disclosure Vulnerability

...

Aruba ClearPass Policy Manager Local Authority Lifting Vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks.Aruba ClearPass Policy Manager has a local elevation vulnerability, and no detailed vulnerability details are available...

Information Disclosure Vulnerability in NETGEAR WNDR3300

The NETGEAR WNDR3300 is a wireless router. An information disclosure vulnerability exists in the NETGEAR WNDR3300. An attacker can exploit the vulnerability to obtain sensitive information...

PT-2021-3061 · Alfa +4 · Alfa Windows 10 Driver +4

Name of the Vulnerable Software and Affected Versions: ALFA Windows 10 driver version 1030.36.604 Description: An issue exists in the WEP, WPA, WPA2, and WPA3 implementations of the ALFA Windows 10 driver, allowing an adversary to inject arbitrary data frames into a protected Wi-Fi network by...

Weak Password Vulnerability in NETGEAR WNR2200

The NETGEAR WNR2200 is a wireless router device. A weak password vulnerability exists in the NETGEAR WNR2200. An attacker could exploit the vulnerability to obtain sensitive information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An input validation error vulnerability exists in Linux kernel version 5.8.9. The vulnerability stems from when a device sends segmented frames and uses the WEP, CCMP, or GCMP...

KLA12174 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

Mikrotik RouterOs 安全漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An...

Weak Password Vulnerability in Ruckus 7363 Multimedia Hotzone Wireless AP

The Ruckus 7363 is a wireless product from RUCKUS. A weak password vulnerability exists in the Ruckus 7363 Multimedia Hotzone Wireless AP, which can be exploited by an attacker to log in to the system backend and perform unauthorized operations...

Weak Password Vulnerability in BHW L7 Cloud Route Wireless Operation Edition

BHW L7 Cloud Router is a router from Beijing BHW Technology Co. A weak password vulnerability exists in the wireless operating version of BHW L7 Cloud Router. An attacker can use this vulnerability to log into the system background and obtain sensitive information...

Weak password vulnerability in EnGenius ENS202EXT

ENS202EXT is an outdoor wireless bridge from EnGenius. A weak password vulnerability exists in the EnGenius ENS202EXT. An attacker can exploit the vulnerability to obtain sensitive information...