VulnerabilityModified
CVE-2020-26140
An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
MEDIUM 6.5EPSS 2.92%
Does this matter?
Lower severity and a low EPSS score (2.92%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 2.92% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-327
- Affected
- alfa/awus036h firmware · siemens/scalance w1748-1 firmware · siemens/scalance w1750d firmware · siemens/scalance w1788-1 firmware · siemens/scalance w1788-2 firmware · siemens/scalance w1788-2ia firmware · siemens/scalance w721-1 firmware · siemens/scalance w722-1 firmware · siemens/scalance w734-1 firmware · siemens/scalance w738-1 firmware · siemens/scalance w748-1 firmware · siemens/scalance w761-1 firmware · siemens/scalance w774-1 firmware · siemens/scalance w778-1 firmware · siemens/scalance w786-1 firmware · siemens/scalance w786-2 firmware · siemens/scalance w786-2ia firmware · siemens/scalance w788-1 firmware · siemens/scalance w788-2 firmware · siemens/scalance wam763-1 firmware · +40 more
- Source
- cve@mitre.org
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html
- https://cert-portal.siemens.com/productcert/html/ssa-913875.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.