CVE search · CVE-2020-24587
CVE-2020-24587
low 2.6
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-327
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | low 2.6 | CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
nvd@nist.govPrimary |
| CVSS 2.0 | low 1.8 | AV:A/AC:H/Au:N/C:P/I:N/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- ieee · ieee_802.11
- linux · mac80211
- debian · debian_linux
- arista · c-100_firmware
- arista · c-110_firmware
- arista · c-120_firmware
- arista · c-130_firmware
- arista · c-200_firmware
- arista · c-230_firmware
- arista · c-235_firmware
- arista · c-250_firmware
- arista · c-260_firmware
- arista · c-65_firmware
- arista · c-75_firmware
- arista · o-105_firmware
- arista · o-90_firmware
- arista · w-118_firmware
- arista · w-68_firmware
- cisco · 1100_firmware
- cisco · 1100-4p_firmware
- cisco · 1100-8p_firmware
- cisco · 1101-4p_firmware
- cisco · 1109-2p_firmware
- cisco · 1109-4p_firmware
- cisco · aironet_1532_firmware
- cisco · aironet_1542d_firmware
- cisco · aironet_1542i_firmware
- cisco · aironet_1552_firmware
- cisco · aironet_1552h_firmware
- cisco · aironet_1572_firmware
- cisco · aironet_1702_firmware
- cisco · aironet_1800_firmware
- cisco · aironet_1800i_firmware
- cisco · aironet_1810_firmware
- cisco · aironet_1810w_firmware
- cisco · aironet_1815_firmware
- cisco · aironet_1815i_firmware
- cisco · aironet_1832_firmware
- cisco · aironet_1842_firmware
- cisco · aironet_1852_firmware
- cisco · aironet_2702_firmware
- cisco · aironet_2800_firmware
- cisco · aironet_2800e_firmware
- cisco · aironet_2800i_firmware
- cisco · aironet_3702_firmware
- cisco · aironet_3800_firmware
- cisco · aironet_3800e_firmware
- cisco · aironet_3800i_firmware
- cisco · aironet_3800p_firmware
- cisco · aironet_4800_firmware
- cisco · aironet_ap803_firmware
- cisco · aironet_iw3702_firmware
- cisco · catalyst_9105_firmware
- cisco · catalyst_9105axi_firmware
- cisco · catalyst_9105axw_firmware
- cisco · catalyst_9115_firmware
- cisco · catalyst_9115_ap_firmware
- cisco · catalyst_9115axe_firmware
- cisco · catalyst_9115axi_firmware
- cisco · catalyst_9117_firmware
- cisco · catalyst_9117_ap_firmware
- cisco · catalyst_9117axi_firmware
- cisco · catalyst_9120_firmware
- cisco · catalyst_9120_ap_firmware
- cisco · catalyst_9120axe_firmware
- cisco · catalyst_9120axi_firmware
- cisco · catalyst_9120axp_firmware
- cisco · catalyst_9124_firmware
- cisco · catalyst_9124axd_firmware
- cisco · catalyst_9124axi_firmware
- cisco · catalyst_9130_firmware
- cisco · catalyst_9130_ap_firmware
- cisco · catalyst_9130axe_firmware
- cisco · catalyst_9130axi_firmware
- cisco · catalyst_iw6300_firmware
- cisco · catalyst_iw6300_ac_firmware
- cisco · catalyst_iw6300_dc_firmware
- cisco · catalyst_iw6300_dcw_firmware
- cisco · esw6300_firmware
- cisco · ip_phone_6861_firmware
- cisco · ip_phone_8821_firmware
- cisco · ip_phone_8832_firmware
- cisco · ip_phone_8861_firmware
- cisco · ip_phone_8865_firmware
- cisco · ir829-2lte-ea-ak9_firmware
- cisco · ir829-2lte-ea-bk9_firmware
- cisco · ir829-2lte-ea-ek9_firmware
- cisco · ir829gw-lte-ga-ck9_firmware
- cisco · ir829gw-lte-ga-ek9_firmware
- cisco · ir829gw-lte-ga-sk9_firmware
- cisco · ir829gw-lte-ga-zk9_firmware
- cisco · ir829gw-lte-na-ak9_firmware
- cisco · ir829gw-lte-vz-ak9_firmware
- cisco · meraki_gr10_firmware
- cisco · meraki_gr60_firmware
- cisco · meraki_mr12_firmware
- cisco · meraki_mr20_firmware
- cisco · meraki_mr26_firmware
- cisco · meraki_mr30h_firmware
- cisco · meraki_mr32_firmware
- cisco · meraki_mr33_firmware
- cisco · meraki_mr34_firmware
- cisco · meraki_mr36_firmware
- cisco · meraki_mr42_firmware
- cisco · meraki_mr42e_firmware
- cisco · meraki_mr44_firmware
- cisco · meraki_mr45_firmware
- cisco · meraki_mr46_firmware
- cisco · meraki_mr46e_firmware
- cisco · meraki_mr52_firmware
- cisco · meraki_mr53_firmware
- cisco · meraki_mr53e_firmware
- cisco · meraki_mr55_firmware
- cisco · meraki_mr56_firmware
- cisco · meraki_mr62_firmware
- cisco · meraki_mr66_firmware
- cisco · meraki_mr70_firmware
- cisco · meraki_mr72_firmware
- cisco · meraki_mr74_firmware
- cisco · meraki_mr76_firmware
- cisco · meraki_mr84_firmware
- cisco · meraki_mr86_firmware
- cisco · meraki_mx64w_firmware
- cisco · meraki_mx65w_firmware
- cisco · meraki_mx67cw_firmware
- cisco · meraki_mx67w_firmware
- cisco · meraki_mx68cw_firmware
- cisco · meraki_mx68w_firmware
- cisco · meraki_z3_firmware
- cisco · meraki_z3c_firmware
- cisco · webex_board_55_firmware
- cisco · webex_board_55s_firmware
- cisco · webex_board_70_firmware
- cisco · webex_board_70s_firmware
- cisco · webex_board_85s_firmware
- cisco · webex_dx70_firmware
- cisco · webex_dx80_firmware
- cisco · webex_room_55_firmware
- cisco · webex_room_55_dual_firmware
- cisco · webex_room_70_firmware
- cisco · webex_room_70_dual_firmware
- cisco · webex_room_70_dual_g2_firmware
- cisco · webex_room_70_single_firmware
- cisco · webex_room_70_single_g2_firmware
- cisco · webex_room_kit_firmware
- cisco · webex_room_kit_mini_firmware
- intel · ac_8260_firmware
- intel · ac_8265_firmware
- intel · ac_9260_firmware
- intel · ac_9560_firmware
- intel · killer_ac_1550_firmware
- intel · killer_wi-fi_6_ax1650_firmware
- intel · killer_wi-fi_6e_ax1675_firmware
- intel · proset_ac_3165_firmware
- intel · proset_ac_3168_firmware
- intel · proset_ac_8260_firmware
- intel · proset_ac_8265_firmware
- intel · proset_ac_9260_firmware
- intel · proset_ac_9461_firmware
- intel · proset_ac_9462_firmware
- intel · proset_ac_9560_firmware
- intel · proset_wi-fi_6_ax200_firmware
- intel · proset_wi-fi_6_ax201_firmware
- intel · proset_wi-fi_6e_ax210_firmware
- intel · proset_wireless_7265_(rev_d)_firmware
- intel · wi-fi_6_ax200_firmware
- intel · wi-fi_6_ax201_firmware
- linux · linux_kernel
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing ListThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comExploitThird Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.htmlThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing ListThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comExploitThird Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.htmlThird Party Advisory