CVEvulnerability
CVE-2020-26141
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-05-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-354
Description
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.
Affected configurations
• alfa awus036h firmware 6.1316.1209
• cisco meraki gr10 firmware (< 27.7.1)
• cisco meraki gr60 firmware (< 27.7.1)
• cisco meraki mr20 firmware (< 27.7.1)
• cisco meraki mr30h firmware (< 27.7.1)
• cisco meraki mr33 firmware (< 27.7.1)
• cisco meraki mr36 firmware (< 27.7.1)
• cisco meraki mr42 firmware (< 27.7.1)
• cisco meraki mr42e firmware (< 27.7.1)
• cisco meraki mr44 firmware (< 27.7.1)
• cisco meraki mr45 firmware (< 27.7.1)
• cisco meraki mr46 firmware (< 27.7.1)
• cisco meraki mr46e firmware (< 27.7.1)
• cisco meraki mr52 firmware (< 27.7.1)
• cisco meraki mr53 firmware (< 27.7.1)
• cisco meraki mr53e firmware (< 27.7.1)
• cisco meraki mr55 firmware (< 27.7.1)
• cisco meraki mr56 firmware (< 27.7.1)
• cisco meraki mr70 firmware (< 27.7.1)
• cisco meraki mr74 firmware (< 27.7.1)
• cisco meraki mr76 firmware (< 27.7.1)
• cisco meraki mr84 firmware (< 27.7.1)
• cisco meraki mr86 firmware (< 27.7.1)
• cisco meraki mr12 firmware (< 26.8.3)
• cisco meraki mr18 firmware (< 26.8.3)
• cisco meraki mr26 firmware (< 26.8.3)
• cisco meraki mr32 firmware (< 26.8.3)
• cisco meraki mr34 firmware (< 26.8.3)
• cisco meraki mr62 firmware (< 26.8.3)
• cisco meraki mr66 firmware (< 26.8.3)
• cisco meraki mr72 firmware (< 26.8.3)
• cisco meraki mx64w firmware (< 17.0)
• cisco meraki mx65w firmware (< 17.0)
• cisco meraki mx67w firmware (< 17.0)
• cisco meraki mx67cw firmware (< 17.0)
• cisco meraki mx68w firmware (< 17.0)
• cisco meraki mx68cw firmware (< 17.0)
• cisco meraki z3 firmware (< 17.0)
• cisco meraki z3c firmware (< 17.0)
• cisco wireless ip phone 8821 firmware (< 11.0\(6\)sr2)
• cisco ip phone 6861 firmware (< 11.3\(5\))
• cisco ip phone 8861 firmware (< 11.3\(5\))
• cisco ip phone 8861 firmware (< 14.1\(1\))
• cisco ip phone 8865 firmware (< 14.1\(1\))
• cisco ip conference phone 8832 firmware (< 14.1\(1\))
• cisco webex room series firmware (< 1.2\(0\)sr1)
• cisco webex desk series firmware (< 1.2\(0\)sr1)
• cisco webex board series firmware (< 10.8.2.5)
• cisco webex wireless phone 860 firmware (< 1.4\(0\))
• cisco webex wireless phone 840 firmware (< 1.4\(0\))
• siemens 6gk5778-1gy00-0ab0 firmware
• siemens 6gk5778-1gy00-0aa0 firmware
• siemens 6gk5721-1fc00-0aa0 firmware
• siemens 6gk5721-1fc00-0ab0 firmware
• siemens 6gk5722-1fc00-0aa0 firmware
• siemens 6gk5722-1fc00-0ab0 firmware
• siemens 6gk5722-1fc00-0ac0 firmware
• siemens 6gk5734-1fx00-0aa0 firmware
• siemens 6gk5734-1fx00-0aa6 firmware
• siemens 6gk5734-1fx00-0ab0 firmware
… and 36 more
Related
Weakness · CWE (1)
- CWE-354 Improper Validation of Integrity Check Value weakness
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Third Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory
- https://www.fragattacks.com Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Third Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory
- https://www.fragattacks.com Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-913875.html cert-portal.siemens.com