Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Published

2021-05-11T20:15:08.647

Last Modified

2024-11-21T05:19:20.157

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

CVSSv2 Vector

AV:A/AC:M/Au:N/C:N/I:N/A:P

Access Vector: ADJACENT_NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

5.5

Impact Score

2.9

Weaknesses

Type: Primary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	netbsd	netbsd	7.1	Yes
Operating System	debian	debian_linux	9.0	Yes
Operating System	arista	c-100_firmware	-	Yes
Hardware	arista	c-100	-	No
Operating System	arista	c-110_firmware	-	Yes
Hardware	arista	c-110	-	No
Operating System	arista	c-120_firmware	-	Yes
Hardware	arista	c-120	-	No
Operating System	arista	c-130_firmware	-	Yes
Hardware	arista	c-130	-	No
Operating System	arista	c-200_firmware	-	Yes
Hardware	arista	c-200	-	No
Operating System	arista	c-230_firmware	-	Yes
Hardware	arista	c-230	-	No
Operating System	arista	c-235_firmware	-	Yes
Hardware	arista	c-235	-	No
Operating System	arista	c-250_firmware	-	Yes
Hardware	arista	c-250	-	No
Operating System	arista	c-260_firmware	-	Yes
Hardware	arista	c-260	-	No
Operating System	arista	c-65_firmware	-	Yes
Hardware	arista	c-65	-	No
Operating System	arista	c-75_firmware	-	Yes
Hardware	arista	c-75	-	No
Operating System	arista	o-105_firmware	-	Yes
Hardware	arista	o-105	-	No
Operating System	arista	o-90_firmware	-	Yes
Hardware	arista	o-90	-	No
Operating System	arista	w-118_firmware	-	Yes
Hardware	arista	w-118	-	No
Operating System	arista	w-68_firmware	-	Yes
Hardware	arista	w-68	-	No
Operating System	cisco	1100_firmware	-	Yes
Hardware	cisco	1100	-	No
Operating System	cisco	1100-4p_firmware	-	Yes
Hardware	cisco	1100-4p	-	No
Operating System	cisco	1100-8p_firmware	-	Yes
Hardware	cisco	1100-8p	-	No
Operating System	cisco	1101-4p_firmware	-	Yes
Hardware	cisco	1101-4p	-	No
Operating System	cisco	1109-2p_firmware	-	Yes
Hardware	cisco	1109-2p	-	No
Operating System	cisco	1109-4p_firmware	-	Yes
Hardware	cisco	1109-4p	-	No
Operating System	cisco	aironet_1532_firmware	-	Yes
Hardware	cisco	aironet_1532	-	No
Operating System	cisco	aironet_1542d_firmware	-	Yes
Hardware	cisco	aironet_1542d	-	No
Operating System	cisco	aironet_1542i_firmware	-	Yes
Hardware	cisco	aironet_1542i	-	No
Operating System	cisco	aironet_1552_firmware	-	Yes
Hardware	cisco	aironet_1552	-	No
Operating System	cisco	aironet_1552h_firmware	-	Yes
Hardware	cisco	aironet_1552h	-	No
Operating System	cisco	aironet_1572_firmware	-	Yes
Hardware	cisco	aironet_1572	-	No
Operating System	cisco	aironet_1702_firmware	-	Yes
Hardware	cisco	aironet_1702	-	No
Operating System	cisco	aironet_1800_firmware	-	Yes
Hardware	cisco	aironet_1800	-	No
Operating System	cisco	aironet_1800i_firmware	-	Yes
Hardware	cisco	aironet_1800i	-	No
Operating System	cisco	aironet_1810_firmware	-	Yes
Hardware	cisco	aironet_1810	-	No
Operating System	cisco	aironet_1810w_firmware	-	Yes
Hardware	cisco	aironet_1810w	-	No
Operating System	cisco	aironet_1815_firmware	-	Yes
Hardware	cisco	aironet_1815	-	No
Operating System	cisco	aironet_1815i_firmware	-	Yes
Hardware	cisco	aironet_1815i	-	No
Operating System	cisco	aironet_1832_firmware	-	Yes
Hardware	cisco	aironet_1832	-	No
Operating System	cisco	aironet_1842_firmware	-	Yes
Hardware	cisco	aironet_1842	-	No
Operating System	cisco	aironet_1852_firmware	-	Yes
Hardware	cisco	aironet_1852	-	No
Operating System	cisco	aironet_2702_firmware	-	Yes
Hardware	cisco	aironet_2702	-	No
Operating System	cisco	aironet_2800_firmware	-	Yes
Hardware	cisco	aironet_2800	-	No
Operating System	cisco	aironet_2800e_firmware	-	Yes
Hardware	cisco	aironet_2800e	-	No
Operating System	cisco	aironet_2800i_firmware	-	Yes
Hardware	cisco	aironet_2800i	-	No
Operating System	cisco	aironet_3702_firmware	-	Yes
Hardware	cisco	aironet_3702	-	No
Operating System	cisco	aironet_3800_firmware	-	Yes
Hardware	cisco	aironet_3800	-	No
Operating System	cisco	aironet_3800e_firmware	-	Yes
Hardware	cisco	aironet_3800e	-	No
Operating System	cisco	aironet_3800i_firmware	-	Yes
Hardware	cisco	aironet_3800i	-	No
Operating System	cisco	aironet_3800p_firmware	-	Yes
Hardware	cisco	aironet_3800p	-	No
Operating System	cisco	aironet_4800_firmware	-	Yes
Hardware	cisco	aironet_4800	-	No
Operating System	cisco	aironet_ap803_firmware	-	Yes
Hardware	cisco	aironet_ap803	-	No
Operating System	cisco	aironet_iw3702_firmware	-	Yes
Hardware	cisco	aironet_iw3702	-	No
Operating System	cisco	catalyst_9105_firmware	-	Yes
Hardware	cisco	catalyst_9105	-	No
Operating System	cisco	catalyst_9105axi_firmware	-	Yes
Hardware	cisco	catalyst_9105axi	-	No
Operating System	cisco	catalyst_9105axw_firmware	-	Yes
Hardware	cisco	catalyst_9105axw	-	No
Operating System	cisco	catalyst_9115_firmware	-	Yes
Hardware	cisco	catalyst_9115	-	No
Operating System	cisco	catalyst_9115_ap_firmware	-	Yes
Hardware	cisco	catalyst_9115_ap	-	No
Operating System	cisco	catalyst_9115axe_firmware	-	Yes
Hardware	cisco	catalyst_9115axe	-	No
Operating System	cisco	catalyst_9115axi_firmware	-	Yes
Hardware	cisco	catalyst_9115axi	-	No
Operating System	cisco	catalyst_9117_firmware	-	Yes
Hardware	cisco	catalyst_9117	-	No
Operating System	cisco	catalyst_9117_ap_firmware	-	Yes
Hardware	cisco	catalyst_9117_ap	-	No
Operating System	cisco	catalyst_9117axi_firmware	-	Yes
Hardware	cisco	catalyst_9117axi	-	No
Operating System	cisco	catalyst_9120_firmware	-	Yes
Hardware	cisco	catalyst_9120	-	No
Operating System	cisco	catalyst_9120_ap_firmware	-	Yes
Hardware	cisco	catalyst_9120_ap	-	No
Operating System	cisco	catalyst_9120axe_firmware	-	Yes
Hardware	cisco	catalyst_9120axe	-	No
Operating System	cisco	catalyst_9120axi_firmware	-	Yes
Hardware	cisco	catalyst_9120axi	-	No
Operating System	cisco	catalyst_9120axp_firmware	-	Yes
Hardware	cisco	catalyst_9120axp	-	No
Operating System	cisco	catalyst_9124_firmware	-	Yes
Hardware	cisco	catalyst_9124	-	No
Operating System	cisco	catalyst_9124axd_firmware	-	Yes
Hardware	cisco	catalyst_9124axd	-	No
Operating System	cisco	catalyst_9124axi_firmware	-	Yes
Hardware	cisco	catalyst_9124axi	-	No
Operating System	cisco	catalyst_9130_firmware	-	Yes
Hardware	cisco	catalyst_9130	-	No
Operating System	cisco	catalyst_9130_ap_firmware	-	Yes
Hardware	cisco	catalyst_9130_ap	-	No
Operating System	cisco	catalyst_9130axe_firmware	-	Yes
Hardware	cisco	catalyst_9130axe	-	No
Operating System	cisco	catalyst_9130axi_firmware	-	Yes
Hardware	cisco	catalyst_9130axi	-	No
Operating System	cisco	catalyst_iw6300_firmware	-	Yes
Hardware	cisco	catalyst_iw6300	-	No
Operating System	cisco	catalyst_iw6300_ac_firmware	-	Yes
Hardware	cisco	catalyst_iw6300_ac	-	No
Operating System	cisco	catalyst_iw6300_dc_firmware	-	Yes
Hardware	cisco	catalyst_iw6300_dc	-	No
Operating System	cisco	catalyst_iw6300_dcw_firmware	-	Yes
Hardware	cisco	catalyst_iw6300_dcw	-	No
Operating System	cisco	esw6300_firmware	-	Yes
Hardware	cisco	esw6300	-	No
Operating System	cisco	ip_phone_6861_firmware	-	Yes
Hardware	cisco	ip_phone_6861	-	No
Operating System	cisco	ip_phone_8821_firmware	-	Yes
Hardware	cisco	ip_phone_8821	-	No
Operating System	cisco	ip_phone_8832_firmware	-	Yes
Hardware	cisco	ip_phone_8832	-	No
Operating System	cisco	ip_phone_8861_firmware	-	Yes
Hardware	cisco	ip_phone_8861	-	No
Operating System	cisco	ip_phone_8865_firmware	-	Yes
Hardware	cisco	ip_phone_8865	-	No
Operating System	cisco	ir829-2lte-ea-ak9_firmware	-	Yes
Hardware	cisco	ir829-2lte-ea-ak9	-	No
Operating System	cisco	ir829-2lte-ea-bk9_firmware	-	Yes
Hardware	cisco	ir829-2lte-ea-bk9	-	No
Operating System	cisco	ir829-2lte-ea-ek9_firmware	-	Yes
Hardware	cisco	ir829-2lte-ea-ek9	-	No
Operating System	cisco	ir829gw-lte-ga-ck9_firmware	-	Yes
Hardware	cisco	ir829gw-lte-ga-ck9	-	No
Operating System	cisco	ir829gw-lte-ga-ek9_firmware	-	Yes
Hardware	cisco	ir829gw-lte-ga-ek9	-	No
Operating System	cisco	ir829gw-lte-ga-sk9_firmware	-	Yes
Hardware	cisco	ir829gw-lte-ga-sk9	-	No
Operating System	cisco	ir829gw-lte-ga-zk9_firmware	-	Yes
Hardware	cisco	ir829gw-lte-ga-zk9	-	No
Operating System	cisco	ir829gw-lte-na-ak9_firmware	-	Yes
Hardware	cisco	ir829gw-lte-na-ak9	-	No
Operating System	cisco	ir829gw-lte-vz-ak9_firmware	-	Yes
Hardware	cisco	ir829gw-lte-vz-ak9	-	No
Operating System	cisco	meraki_gr10_firmware	-	Yes
Hardware	cisco	meraki_gr10	-	No
Operating System	cisco	meraki_gr60_firmware	-	Yes
Hardware	cisco	meraki_gr60	-	No
Operating System	cisco	meraki_mr12_firmware	-	Yes
Hardware	cisco	meraki_mr12	-	No
Operating System	cisco	meraki_mr20_firmware	-	Yes
Hardware	cisco	meraki_mr20	-	No
Operating System	cisco	meraki_mr26_firmware	-	Yes
Hardware	cisco	meraki_mr26	-	No
Operating System	cisco	meraki_mr30h_firmware	-	Yes
Hardware	cisco	meraki_mr30h	-	No
Operating System	cisco	meraki_mr32_firmware	-	Yes
Hardware	cisco	meraki_mr32	-	No
Operating System	cisco	meraki_mr33_firmware	-	Yes
Hardware	cisco	meraki_mr33	-	No
Operating System	cisco	meraki_mr34_firmware	-	Yes
Hardware	cisco	meraki_mr34	-	No
Operating System	cisco	meraki_mr36_firmware	-	Yes
Hardware	cisco	meraki_mr36	-	No
Operating System	cisco	meraki_mr42_firmware	-	Yes
Hardware	cisco	meraki_mr42	-	No
Operating System	cisco	meraki_mr42e_firmware	-	Yes
Hardware	cisco	meraki_mr42e	-	No
Operating System	cisco	meraki_mr44_firmware	-	Yes
Hardware	cisco	meraki_mr44	-	No
Operating System	cisco	meraki_mr45_firmware	-	Yes
Hardware	cisco	meraki_mr45	-	No
Operating System	cisco	meraki_mr46_firmware	-	Yes
Hardware	cisco	meraki_mr46	-	No
Operating System	cisco	meraki_mr46e_firmware	-	Yes
Hardware	cisco	meraki_mr46e	-	No
Operating System	cisco	meraki_mr52_firmware	-	Yes
Hardware	cisco	meraki_mr52	-	No
Operating System	cisco	meraki_mr53_firmware	-	Yes
Hardware	cisco	meraki_mr53	-	No
Operating System	cisco	meraki_mr53e_firmware	-	Yes
Hardware	cisco	meraki_mr53e	-	No
Operating System	cisco	meraki_mr55_firmware	-	Yes
Hardware	cisco	meraki_mr55	-	No
Operating System	cisco	meraki_mr56_firmware	-	Yes
Hardware	cisco	meraki_mr56	-	No
Operating System	cisco	meraki_mr62_firmware	-	Yes
Hardware	cisco	meraki_mr62	-	No
Operating System	cisco	meraki_mr66_firmware	-	Yes
Hardware	cisco	meraki_mr66	-	No
Operating System	cisco	meraki_mr70_firmware	-	Yes
Hardware	cisco	meraki_mr70	-	No
Operating System	cisco	meraki_mr72_firmware	-	Yes
Hardware	cisco	meraki_mr72	-	No
Operating System	cisco	meraki_mr74_firmware	-	Yes
Hardware	cisco	meraki_mr74	-	No
Operating System	cisco	meraki_mr76_firmware	-	Yes
Hardware	cisco	meraki_mr76	-	No
Operating System	cisco	meraki_mr84_firmware	-	Yes
Hardware	cisco	meraki_mr84	-	No
Operating System	cisco	meraki_mr86_firmware	-	Yes
Hardware	cisco	meraki_mr86	-	No
Operating System	cisco	meraki_mx64w_firmware	-	Yes
Hardware	cisco	meraki_mx64w	-	No
Operating System	cisco	meraki_mx65w_firmware	-	Yes
Hardware	cisco	meraki_mx65w	-	No
Operating System	cisco	meraki_mx67cw_firmware	-	Yes
Hardware	cisco	meraki_mx67cw	-	No
Operating System	cisco	meraki_mx67w_firmware	-	Yes
Hardware	cisco	meraki_mx67w	-	No
Operating System	cisco	meraki_mx68cw_firmware	-	Yes
Hardware	cisco	meraki_mx68cw	-	No
Operating System	cisco	meraki_mx68w_firmware	-	Yes
Hardware	cisco	meraki_mx68w	-	No
Operating System	cisco	meraki_z3_firmware	-	Yes
Hardware	cisco	meraki_z3	-	No
Operating System	cisco	meraki_z3c_firmware	-	Yes
Hardware	cisco	meraki_z3c	-	No
Operating System	cisco	webex_board_55_firmware	-	Yes
Hardware	cisco	webex_board_55	-	No
Operating System	cisco	webex_board_55s_firmware	-	Yes
Hardware	cisco	webex_board_55s	-	No
Operating System	cisco	webex_board_70_firmware	-	Yes
Hardware	cisco	webex_board_70	-	No
Operating System	cisco	webex_board_70s_firmware	-	Yes
Hardware	cisco	webex_board_70s	-	No
Operating System	cisco	webex_board_85s_firmware	-	Yes
Hardware	cisco	webex_board_85s	-	No
Operating System	cisco	webex_dx70_firmware	-	Yes
Hardware	cisco	webex_dx70	-	No
Operating System	cisco	webex_dx80_firmware	-	Yes
Hardware	cisco	webex_dx80	-	No
Operating System	cisco	webex_room_55_firmware	-	Yes
Hardware	cisco	webex_room_55	-	No
Operating System	cisco	webex_room_55_dual_firmware	-	Yes
Hardware	cisco	webex_room_55_dual	-	No
Operating System	cisco	webex_room_70_firmware	-	Yes
Hardware	cisco	webex_room_70	-	No
Operating System	cisco	webex_room_70_dual_firmware	-	Yes
Hardware	cisco	webex_room_70_dual	-	No
Operating System	cisco	webex_room_70_dual_g2_firmware	-	Yes
Hardware	cisco	webex_room_70_dual_g2	-	No
Operating System	cisco	webex_room_70_single_firmware	-	Yes
Hardware	cisco	webex_room_70_single	-	No
Operating System	cisco	webex_room_70_single_g2_firmware	-	Yes
Hardware	cisco	webex_room_70_single_g2	-	No
Operating System	cisco	webex_room_kit_firmware	-	Yes
Hardware	cisco	webex_room_kit	-	No
Operating System	cisco	webex_room_kit_mini_firmware	-	Yes
Hardware	cisco	webex_room_kit_mini	-	No
Operating System	intel	ac_8260_firmware	-	Yes
Hardware	intel	ac_8260	-	No
Operating System	intel	ac_8265_firmware	-	Yes
Hardware	intel	ac_8265	-	No
Operating System	intel	ac_9260_firmware	-	Yes
Hardware	intel	ac_9260	-	No
Operating System	intel	ac_9560_firmware	-	Yes
Hardware	intel	ac_9560	-	No
Operating System	intel	killer_ac_1550_firmware	-	Yes
Hardware	intel	killer_ac_1550	-	No
Operating System	intel	killer_wi-fi_6_ax1650_firmware	-	Yes
Hardware	intel	killer_wi-fi_6_ax1650	-	No
Operating System	intel	killer_wi-fi_6e_ax1675_firmware	-	Yes
Hardware	intel	killer_wi-fi_6e_ax1675	-	No
Operating System	intel	proset_ac_3165_firmware	-	Yes
Hardware	intel	proset_ac_3165	-	No
Operating System	intel	proset_ac_3168_firmware	-	Yes
Hardware	intel	proset_ac_3168	-	No
Operating System	intel	proset_ac_8260_firmware	-	Yes
Hardware	intel	proset_ac_8260	-	No
Operating System	intel	proset_ac_8265_firmware	-	Yes
Hardware	intel	proset_ac_8265	-	No
Operating System	intel	proset_ac_9260_firmware	-	Yes
Hardware	intel	proset_ac_9260	-	No
Operating System	intel	proset_ac_9461_firmware	-	Yes
Hardware	intel	proset_ac_9461	-	No
Operating System	intel	proset_ac_9462_firmware	-	Yes
Hardware	intel	proset_ac_9462	-	No
Operating System	intel	proset_ac_9560_firmware	-	Yes
Hardware	intel	proset_ac_9560	-	No
Operating System	intel	proset_wi-fi_6_ax200_firmware	-	Yes
Hardware	intel	proset_wi-fi_6_ax200	-	No
Operating System	intel	proset_wi-fi_6_ax201_firmware	-	Yes
Hardware	intel	proset_wi-fi_6_ax201	-	No
Operating System	intel	proset_wi-fi_6e_ax210_firmware	-	Yes
Hardware	intel	proset_wi-fi_6e_ax210	-	No
Operating System	intel	proset_wireless_7265_\(rev_d\)_firmware	-	Yes
Hardware	intel	proset_wireless_7265_\(rev_d\)	-	No
Operating System	intel	wi-fi_6_ax200_firmware	-	Yes
Hardware	intel	wi-fi_6_ax200	-	No
Operating System	intel	wi-fi_6_ax201_firmware	-	Yes
Hardware	intel	wi-fi_6_ax201	-	No

References

http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List, Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Patch, Third Party Advisory ([email protected])
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html Mailing List, Third Party Advisory ([email protected])
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory ([email protected])
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory ([email protected])
https://www.fragattacks.com Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.fragattacks.com Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)