CVEvulnerability

CVE-2020-24587

2.6 LOW Published 2021-05-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.6 LOW — CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
1.8 LOW — AV:A/AC:H/Au:N/C:P/I:N/A:N
Weaknesses
CWE-327

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

Affected configurations

• ieee ieee 802.11 • linux mac80211 • debian debian linux 9.0 • arista c-100 firmware • arista c-110 firmware • arista c-120 firmware • arista c-130 firmware • arista c-200 firmware • arista c-230 firmware • arista c-235 firmware • arista c-250 firmware • arista c-260 firmware • arista c-65 firmware • arista c-75 firmware • arista o-105 firmware • arista o-90 firmware • arista w-118 firmware • arista w-68 firmware • cisco 1100 firmware • cisco 1100-4p firmware • cisco 1100-8p firmware • cisco 1101-4p firmware • cisco 1109-2p firmware • cisco 1109-4p firmware • cisco aironet 1532 firmware • cisco aironet 1542d firmware • cisco aironet 1542i firmware • cisco aironet 1552 firmware • cisco aironet 1552h firmware • cisco aironet 1572 firmware • cisco aironet 1702 firmware • cisco aironet 1800 firmware • cisco aironet 1800i firmware • cisco aironet 1810 firmware • cisco aironet 1810w firmware • cisco aironet 1815 firmware • cisco aironet 1815i firmware • cisco aironet 1832 firmware • cisco aironet 1842 firmware • cisco aironet 1852 firmware • cisco aironet 2702 firmware • cisco aironet 2800 firmware • cisco aironet 2800e firmware • cisco aironet 2800i firmware • cisco aironet 3702 firmware • cisco aironet 3800 firmware • cisco aironet 3800e firmware • cisco aironet 3800i firmware • cisco aironet 3800p firmware • cisco aironet 4800 firmware • cisco aironet ap803 firmware • cisco aironet iw3702 firmware • cisco catalyst 9105 firmware • cisco catalyst 9105axi firmware • cisco catalyst 9105axw firmware • cisco catalyst 9115 firmware • cisco catalyst 9115 ap firmware • cisco catalyst 9115axe firmware • cisco catalyst 9115axi firmware • cisco catalyst 9117 firmware … and 114 more

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References