CVEvulnerability

CVE-2020-26139

5.3 MEDIUM Published 2021-05-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.9 LOW — AV:A/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-287

Description

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Affected configurations

• netbsd netbsd 7.1 • debian debian linux 9.0 • arista c-100 firmware • arista c-110 firmware • arista c-120 firmware • arista c-130 firmware • arista c-200 firmware • arista c-230 firmware • arista c-235 firmware • arista c-250 firmware • arista c-260 firmware • arista c-65 firmware • arista c-75 firmware • arista o-105 firmware • arista o-90 firmware • arista w-118 firmware • arista w-68 firmware • cisco 1100 firmware • cisco 1100-4p firmware • cisco 1100-8p firmware • cisco 1101-4p firmware • cisco 1109-2p firmware • cisco 1109-4p firmware • cisco aironet 1532 firmware • cisco aironet 1542d firmware • cisco aironet 1542i firmware • cisco aironet 1552 firmware • cisco aironet 1552h firmware • cisco aironet 1572 firmware • cisco aironet 1702 firmware • cisco aironet 1800 firmware • cisco aironet 1800i firmware • cisco aironet 1810 firmware • cisco aironet 1810w firmware • cisco aironet 1815 firmware • cisco aironet 1815i firmware • cisco aironet 1832 firmware • cisco aironet 1842 firmware • cisco aironet 1852 firmware • cisco aironet 2702 firmware • cisco aironet 2800 firmware • cisco aironet 2800e firmware • cisco aironet 2800i firmware • cisco aironet 3702 firmware • cisco aironet 3800 firmware • cisco aironet 3800e firmware • cisco aironet 3800i firmware • cisco aironet 3800p firmware • cisco aironet 4800 firmware • cisco aironet ap803 firmware • cisco aironet iw3702 firmware • cisco catalyst 9105 firmware • cisco catalyst 9105axi firmware • cisco catalyst 9105axw firmware • cisco catalyst 9115 firmware • cisco catalyst 9115 ap firmware • cisco catalyst 9115axe firmware • cisco catalyst 9115axi firmware • cisco catalyst 9117 firmware • cisco catalyst 9117 ap firmware … and 106 more

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References