CVE-2020-26143

CVSS v3.1 6.5 (Medium)

CVSS v2.0 3.3 (Low)

EPSS 0.23 % (61^th)

Affected Products 12

Advisories 6

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

Weaknesses

CWE-20: Improper Input Validation

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2021-05-11 20:15:08
(3 years ago)
Updated Date: 2021-12-03 21:25:05
(2 years ago)

Affected Products

Alfa

Arista

Siemens

Configuration #1

AND

		CPE23
OR
	Alfa Awus036h Firmware 1030.36.604 for Windows 10	cpe:2.3:o:alfa:awus036h_firmware:1030.36.604:::::windows_10
OR
	Running on/with
	Alfa Awus036h	cpe:2.3:h:alfa:awus036h:-

Configuration #2

AND

		CPE23
OR
	Arista C-75 Firmware	cpe:2.3:o:arista:c-75_firmware:-
OR
	Running on/with
	Arista C-75	cpe:2.3:h:arista:c-75:-

Configuration #3

AND

		CPE23
OR
	Arista O-90 Firmware	cpe:2.3:o:arista:o-90_firmware:-
OR
	Running on/with
	Arista O-90	cpe:2.3:h:arista:o-90:-

Configuration #4

AND

		CPE23
OR
	Arista C-65 Firmware	cpe:2.3:o:arista:c-65_firmware:-
OR
	Running on/with
	Arista C-65	cpe:2.3:h:arista:c-65:-

Configuration #5

AND

		CPE23
OR
	Arista W-68 Firmware	cpe:2.3:o:arista:w-68_firmware:-
OR
	Running on/with
	Arista W-68	cpe:2.3:h:arista:w-68:-

Configuration #6

AND

		CPE23
OR
	Siemens Scalance W700 Ieee 802.11n Firmware	cpe:2.3:o:siemens:scalance_w700_ieee_802.11n_firmware
OR
	Running on/with
	Siemens Scalance W700 Ieee 802.11n	cpe:2.3:h:siemens:scalance_w700_ieee_802.11n:-