Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

Published

2021-05-11T20:15:08.727

Last Modified

2024-11-21T05:19:20.950

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:P/A:N

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

6.5

Impact Score

2.9

Weaknesses

Type: Primary
CWE-354

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	alfa	awus036h_firmware	6.1316.1209	Yes
Hardware	alfa	awus036h	-	No
Operating System	cisco	meraki_gr10_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_gr10	-	No
Operating System	cisco	meraki_gr60_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_gr60	-	No
Operating System	cisco	meraki_mr20_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr20	-	No
Operating System	cisco	meraki_mr30h_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr30h	-	No
Operating System	cisco	meraki_mr33_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr33	-	No
Operating System	cisco	meraki_mr36_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr36	-	No
Operating System	cisco	meraki_mr42_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr42	-	No
Operating System	cisco	meraki_mr42e_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr42e	-	No
Operating System	cisco	meraki_mr44_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr44	-	No
Operating System	cisco	meraki_mr45_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr45	-	No
Operating System	cisco	meraki_mr46_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr46	-	No
Operating System	cisco	meraki_mr46e_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr46e	-	No
Operating System	cisco	meraki_mr52_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr52	-	No
Operating System	cisco	meraki_mr53_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr53	-	No
Operating System	cisco	meraki_mr53e_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr53e	-	No
Operating System	cisco	meraki_mr55_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr55	-	No
Operating System	cisco	meraki_mr56_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr56	-	No
Operating System	cisco	meraki_mr70_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr70	-	No
Operating System	cisco	meraki_mr74_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr74	-	No
Operating System	cisco	meraki_mr76_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr76	-	No
Operating System	cisco	meraki_mr84_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr84	-	No
Operating System	cisco	meraki_mr86_firmware	< 27.7.1	Yes
Hardware	cisco	meraki_mr86	-	No
Operating System	cisco	meraki_mr12_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr12	-	No
Operating System	cisco	meraki_mr18_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr18	-	No
Operating System	cisco	meraki_mr26_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr26	-	No
Operating System	cisco	meraki_mr32_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr32	-	No
Operating System	cisco	meraki_mr34_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr34	-	No
Operating System	cisco	meraki_mr62_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr62	-	No
Operating System	cisco	meraki_mr66_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr66	-	No
Operating System	cisco	meraki_mr72_firmware	< 26.8.3	Yes
Hardware	cisco	meraki_mr72	-	No
Operating System	cisco	meraki_mx64w_firmware	< 17.0	Yes
Hardware	cisco	meraki_mx64w	-	No
Operating System	cisco	meraki_mx65w_firmware	< 17.0	Yes
Hardware	cisco	meraki_mx65w	-	No
Operating System	cisco	meraki_mx67w_firmware	< 17.0	Yes
Hardware	cisco	meraki_mx67w	-	No
Operating System	cisco	meraki_mx67cw_firmware	< 17.0	Yes
Hardware	cisco	meraki_mx67cw	-	No
Operating System	cisco	meraki_mx68w_firmware	< 17.0	Yes
Hardware	cisco	meraki_mx68w	-	No
Operating System	cisco	meraki_mx68cw_firmware	< 17.0	Yes
Hardware	cisco	meraki_mx68cw	-	No
Operating System	cisco	meraki_z3_firmware	< 17.0	Yes
Hardware	cisco	meraki_z3	-	No
Operating System	cisco	meraki_z3c_firmware	< 17.0	Yes
Hardware	cisco	meraki_z3c	-	No
Operating System	cisco	wireless_ip_phone_8821_firmware	< 11.0\(6\)sr2	Yes
Hardware	cisco	wireless_ip_phone_8821	-	No
Operating System	cisco	ip_phone_6861_firmware	< 11.3\(5\)	Yes
Hardware	cisco	ip_phone_6861	-	No
Operating System	cisco	ip_phone_8861_firmware	< 11.3\(5\)	Yes
Hardware	cisco	ip_phone_8861	-	No
Operating System	cisco	ip_phone_8861_firmware	< 14.1\(1\)	Yes
Hardware	cisco	ip_phone_8861	-	No
Operating System	cisco	ip_phone_8865_firmware	< 14.1\(1\)	Yes
Hardware	cisco	ip_phone_8865	-	No
Operating System	cisco	ip_conference_phone_8832_firmware	< 14.1\(1\)	Yes
Hardware	cisco	ip_conference_phone_8832	-	No
Operating System	cisco	webex_room_series_firmware	< 1.2\(0\)sr1	Yes
Hardware	cisco	webex_room_series	-	No
Operating System	cisco	webex_desk_series_firmware	< 1.2\(0\)sr1	Yes
Hardware	cisco	webex_desk_series	-	No
Operating System	cisco	webex_board_series_firmware	< 10.8.2.5	Yes
Hardware	cisco	webex_board_series	-	No
Operating System	cisco	webex_wireless_phone_860_firmware	< 1.4\(0\)	Yes
Hardware	cisco	webex_wireless_phone_860	-	No
Operating System	cisco	webex_wireless_phone_840_firmware	< 1.4\(0\)	Yes
Hardware	cisco	webex_wireless_phone_840	-	No
Operating System	siemens	6gk5778-1gy00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5778-1gy00-0ab0	-	No
Operating System	siemens	6gk5778-1gy00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5778-1gy00-0aa0	-	No
Operating System	siemens	6gk5721-1fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5721-1fc00-0aa0	-	No
Operating System	siemens	6gk5721-1fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5721-1fc00-0ab0	-	No
Operating System	siemens	6gk5722-1fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5722-1fc00-0aa0	-	No
Operating System	siemens	6gk5722-1fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5722-1fc00-0ab0	-	No
Operating System	siemens	6gk5722-1fc00-0ac0_firmware	-	Yes
Hardware	siemens	6gk5722-1fc00-0ac0	-	No
Operating System	siemens	6gk5734-1fx00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5734-1fx00-0aa0	-	No
Operating System	siemens	6gk5734-1fx00-0aa6_firmware	-	Yes
Hardware	siemens	6gk5734-1fx00-0aa6	-	No
Operating System	siemens	6gk5734-1fx00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5734-1fx00-0ab0	-	No
Operating System	siemens	6gk5734-1fx00-0ab6_firmware	-	Yes
Hardware	siemens	6gk5734-1fx00-0ab6	-	No
Operating System	siemens	6gk5738-1gy00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5738-1gy00-0aa0	-	No
Operating System	siemens	6gk5738-1gy00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5738-1gy00-0ab0	-	No
Operating System	siemens	6gk5748-1fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5748-1fc00-0aa0	-	No
Operating System	siemens	6gk5748-1fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5748-1fc00-0ab0	-	No
Operating System	siemens	6gk5748-1gd00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5748-1gd00-0aa0	-	No
Operating System	siemens	6gk5748-1gd00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5748-1gd00-0ab0	-	No
Operating System	siemens	6gk5761-1fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5761-1fc00-0aa0	-	No
Operating System	siemens	6gk5761-1fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5761-1fc00-0ab0	-	No
Operating System	siemens	6gk5774-1fx00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5774-1fx00-0aa0	-	No
Operating System	siemens	6gk5774-1fx00-0aa6_firmware	-	Yes
Hardware	siemens	6gk5774-1fx00-0aa6	-	No
Operating System	siemens	6gk5774-1fx00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5774-1fx00-0ab0	-	No
Operating System	siemens	6gk5774-1fx00-0ab6_firmware	-	Yes
Hardware	siemens	6gk5774-1fx00-0ab6	-	No
Operating System	siemens	6gk5774-1fy00-0ta0_firmware	-	Yes
Hardware	siemens	6gk5774-1fy00-0ta0	-	No
Operating System	siemens	6gk5774-1fy00-0tb0_firmware	-	Yes
Hardware	siemens	6gk5774-1fy00-0tb0	-	No
Operating System	siemens	6gk5778-1gy00-0ta0_firmware	-	Yes
Hardware	siemens	6gk5778-1gy00-0ta0	-	No
Operating System	siemens	6gk5778-1gy00-0tb0_firmware	-	Yes
Hardware	siemens	6gk5778-1gy00-0tb0	-	No
Operating System	siemens	6gk5786-1fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5786-1fc00-0aa0	-	No
Operating System	siemens	6gk5786-1fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5786-1fc00-0ab0	-	No
Operating System	siemens	6gk5786-2fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5786-2fc00-0aa0	-	No
Operating System	siemens	6gk5786-2fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5786-2fc00-0ab0	-	No
Operating System	siemens	6gk5786-2fc00-0ac0_firmware	-	Yes
Hardware	siemens	6gk5786-2fc00-0ac0	-	No
Operating System	siemens	6gk5786-2hc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5786-2hc00-0aa0	-	No
Operating System	siemens	6gk5786-2hc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5786-2hc00-0ab0	-	No
Operating System	siemens	6gk5788-1fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5788-1fc00-0aa0	-	No
Operating System	siemens	6gk5788-1fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5788-1fc00-0ab0	-	No
Operating System	siemens	6gk5788-1gd00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5788-1gd00-0aa0	-	No
Operating System	siemens	6gk5788-1gd00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5788-1gd00-0ab0	-	No
Operating System	siemens	6gk5788-2fc00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5788-2fc00-0aa0	-	No
Operating System	siemens	6gk5788-2fc00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5788-2fc00-0ab0	-	No
Operating System	siemens	6gk5788-2fc00-0ac0_firmware	-	Yes
Hardware	siemens	6gk5788-2fc00-0ac0	-	No
Operating System	siemens	6gk5788-2gd00-0aa0_firmware	-	Yes
Hardware	siemens	6gk5788-2gd00-0aa0	-	No
Operating System	siemens	6gk5788-2gd00-0ab0_firmware	-	Yes
Hardware	siemens	6gk5788-2gd00-0ab0	-	No
Operating System	siemens	6gk5788-2gd00-0ta0_firmware	-	Yes
Hardware	siemens	6gk5788-2gd00-0ta0	-	No
Operating System	siemens	6gk5788-2gd00-0tb0_firmware	-	Yes
Hardware	siemens	6gk5788-2gd00-0tb0	-	No
Operating System	siemens	6gk5788-2gd00-0tc0_firmware	-	Yes
Hardware	siemens	6gk5788-2gd00-0tc0	-	No

References

http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List, Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Third Party Advisory ([email protected])
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory ([email protected])
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory ([email protected])
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory ([email protected])
https://www.fragattacks.com Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.fragattacks.com Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)