Lucene search

[email protected]CVE-2020-24587

HistoryMay 11, 2021 - 8:15 p.m.

CVE-2020-24587

2021-05-1120:15:08

CWE-327

[email protected]

web.nvd.nist.gov

345

In Wild

cve

802.11

wi-fi protected access

wpa

wpa2

wpa3

wep

encryption

vulnerability

nvd

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

2.6 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.4%

JSON

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

Affected configurations

NVD

Node

ieeeieee_802.11

linuxmac80211Match-

Node

debiandebian_linuxMatch9.0

Node

aristac-100_firmwareMatch-

AND

aristac-100Match-

Node

aristac-110_firmwareMatch-

AND

aristac-110Match-

Node

aristac-120_firmwareMatch-

AND

aristac-120Match-

Node

aristac-130_firmwareMatch-

AND

aristac-130Match-

Node

aristac-200_firmwareMatch-

AND

aristac-200Match-

Node

aristac-230_firmwareMatch-

AND

aristac-230Match-

Node

aristac-235_firmwareMatch-

AND

aristac-235Match-

Node

aristac-250_firmwareMatch-

AND

aristac-250Match-

Node

aristac-260_firmwareMatch-

AND

aristac-260Match-

Node

aristac-65_firmwareMatch-

AND

aristac-65Match-

Node

aristac-75_firmwareMatch-

AND

aristac-75Match-

Node

aristao-105_firmwareMatch-

AND

aristao-105Match-

Node

aristao-90_firmwareMatch-

AND

aristao-90Match-

Node

aristaw-118_firmwareMatch-

AND

aristaw-118Match-

Node

aristaw-68_firmwareMatch-

AND

aristaw-68Match-

Node

cisco1100_firmwareMatch-

AND

cisco1100Match-

Node

cisco1100-4p_firmwareMatch-

AND

cisco1100-4pMatch-

Node

cisco1100-8p_firmwareMatch-

AND

cisco1100-8pMatch-

Node

cisco1101-4p_firmwareMatch-

AND

cisco1101-4pMatch-

Node

cisco1109-2p_firmwareMatch-

AND

cisco1109-2pMatch-

Node

cisco1109-4p_firmwareMatch-

AND

cisco1109-4pMatch-

Node

ciscoaironet_1532_firmwareMatch-

AND

ciscoaironet_1532Match-

Node

ciscoaironet_1542d_firmwareMatch-

AND

ciscoaironet_1542dMatch-

Node

ciscoaironet_1542i_firmwareMatch-

AND

ciscoaironet_1542iMatch-

Node

ciscoaironet_1552_firmwareMatch-

AND

ciscoaironet_1552Match-

Node

ciscoaironet_1552h_firmwareMatch-

AND

ciscoaironet_1552hMatch-

Node

ciscoaironet_1572_firmwareMatch-

AND

ciscoaironet_1572Match-

Node

ciscoaironet_1702_firmwareMatch-

AND

ciscoaironet_1702Match-

Node

ciscoaironet_1800_firmwareMatch-

AND

ciscoaironet_1800Match-

Node

ciscoaironet_1800i_firmwareMatch-

AND

ciscoaironet_1800iMatch-

Node

ciscoaironet_1810_firmwareMatch-

AND

ciscoaironet_1810Match-

Node

ciscoaironet_1810w_firmwareMatch-

AND

ciscoaironet_1810wMatch-

Node

ciscoaironet_1815_firmwareMatch-

AND

ciscoaironet_1815Match-

Node

ciscoaironet_1815i_firmwareMatch-

AND

ciscoaironet_1815iMatch-

Node

ciscoaironet_1832_firmwareMatch-

AND

ciscoaironet_1832Match-

Node

ciscoaironet_1842_firmwareMatch-

AND

ciscoaironet_1842Match-

Node

ciscoaironet_1852_firmwareMatch-

AND

ciscoaironet_1852Match-

Node

ciscoaironet_2702_firmwareMatch-

AND

ciscoaironet_2702Match-

Node

ciscoaironet_2800_firmwareMatch-

AND

ciscoaironet_2800Match-

Node

ciscoaironet_2800e_firmwareMatch-

AND

ciscoaironet_2800eMatch-

Node

ciscoaironet_2800i_firmwareMatch-

AND

ciscoaironet_2800iMatch-

Node

ciscoaironet_3702_firmwareMatch-

AND

ciscoaironet_3702Match-

Node

ciscoaironet_3800_firmwareMatch-

AND

ciscoaironet_3800Match-

Node

ciscoaironet_3800e_firmwareMatch-

AND

ciscoaironet_3800eMatch-

Node

ciscoaironet_3800i_firmwareMatch-

AND

ciscoaironet_3800iMatch-

Node

ciscoaironet_3800p_firmwareMatch-

AND

ciscoaironet_3800pMatch-

Node

ciscoaironet_4800_firmwareMatch-

AND

ciscoaironet_4800Match-

Node

ciscoaironet_ap803_firmwareMatch-

AND

ciscoaironet_ap803Match-

Node

ciscoaironet_iw3702_firmwareMatch-

AND

ciscoaironet_iw3702Match-

Node

ciscocatalyst_9105_firmwareMatch-

AND

ciscocatalyst_9105Match-

Node

ciscocatalyst_9105axi_firmwareMatch-

AND

ciscocatalyst_9105axiMatch-

Node

ciscocatalyst_9105axw_firmwareMatch-

AND

ciscocatalyst_9105axwMatch-

Node

ciscocatalyst_9115_firmwareMatch-

AND

ciscocatalyst_9115Match-

Node

ciscocatalyst_9115_ap_firmwareMatch-

AND

ciscocatalyst_9115_apMatch-

Node

ciscocatalyst_9115axe_firmwareMatch-

AND

ciscocatalyst_9115axeMatch-

Node

ciscocatalyst_9115axi_firmwareMatch-

AND

ciscocatalyst_9115axiMatch-

Node

ciscocatalyst_9117_firmwareMatch-

AND

ciscocatalyst_9117Match-

Node

ciscocatalyst_9117_ap_firmwareMatch-

AND

ciscocatalyst_9117_apMatch-

Node

ciscocatalyst_9117axi_firmwareMatch-

AND

ciscocatalyst_9117axiMatch-

Node

ciscocatalyst_9120_firmwareMatch-

AND

ciscocatalyst_9120Match-

Node

ciscocatalyst_9120_ap_firmwareMatch-

AND

ciscocatalyst_9120_apMatch-

Node

ciscocatalyst_9120axe_firmwareMatch-

AND

ciscocatalyst_9120axeMatch-

Node

ciscocatalyst_9120axi_firmwareMatch-

AND

ciscocatalyst_9120axiMatch-

Node

ciscocatalyst_9120axp_firmwareMatch-

AND

ciscocatalyst_9120axpMatch-

Node

ciscocatalyst_9124_firmwareMatch-

AND

ciscocatalyst_9124Match-

Node

ciscocatalyst_9124axd_firmwareMatch-

AND

ciscocatalyst_9124axdMatch-

Node

ciscocatalyst_9124axi_firmwareMatch-

AND

ciscocatalyst_9124axiMatch-

Node

ciscocatalyst_9130_firmwareMatch-

AND

ciscocatalyst_9130Match-

Node

ciscocatalyst_9130_ap_firmwareMatch-

AND

ciscocatalyst_9130_apMatch-

Node

ciscocatalyst_9130axe_firmwareMatch-

AND

ciscocatalyst_9130axeMatch-

Node

ciscocatalyst_9130axi_firmwareMatch-

AND

ciscocatalyst_9130axiMatch-

Node

ciscocatalyst_iw6300_firmwareMatch-

AND

ciscocatalyst_iw6300Match-

Node

ciscocatalyst_iw6300_ac_firmwareMatch-

AND

ciscocatalyst_iw6300_acMatch-

Node

ciscocatalyst_iw6300_dc_firmwareMatch-

AND

ciscocatalyst_iw6300_dcMatch-

Node

ciscocatalyst_iw6300_dcw_firmwareMatch-

AND

ciscocatalyst_iw6300_dcwMatch-

Node

ciscoesw6300_firmwareMatch-

AND

ciscoesw6300Match-

Node

ciscoip_phone_6861_firmwareMatch-

AND

ciscoip_phone_6861Match-

Node

ciscoip_phone_8821_firmwareMatch-

AND

ciscoip_phone_8821Match-

Node

ciscoip_phone_8832_firmwareMatch-

AND

ciscoip_phone_8832Match-

Node

ciscoip_phone_8861_firmwareMatch-

AND

ciscoip_phone_8861Match-

Node

ciscoip_phone_8865_firmwareMatch-

AND

ciscoip_phone_8865Match-

Node

ciscoir829-2lte-ea-ak9_firmwareMatch-

AND

ciscoir829-2lte-ea-ak9Match-

Node

ciscoir829-2lte-ea-bk9_firmwareMatch-

AND

ciscoir829-2lte-ea-bk9Match-

Node

ciscoir829-2lte-ea-ek9_firmwareMatch-

AND

ciscoir829-2lte-ea-ek9Match-

Node

ciscoir829gw-lte-ga-ck9_firmwareMatch-

AND

ciscoir829gw-lte-ga-ck9Match-

Node

ciscoir829gw-lte-ga-ek9_firmwareMatch-

AND

ciscoir829gw-lte-ga-ek9Match-

Node

ciscoir829gw-lte-ga-sk9_firmwareMatch-

AND

ciscoir829gw-lte-ga-sk9Match-

Node

ciscoir829gw-lte-ga-zk9_firmwareMatch-

AND

ciscoir829gw-lte-ga-zk9Match-

Node

ciscoir829gw-lte-na-ak9_firmwareMatch-

AND

ciscoir829gw-lte-na-ak9Match-

Node

ciscoir829gw-lte-vz-ak9_firmwareMatch-

AND

ciscoir829gw-lte-vz-ak9Match-

Node

ciscomeraki_gr10_firmwareMatch-

AND

ciscomeraki_gr10Match-

Node

ciscomeraki_gr60_firmwareMatch-

AND

ciscomeraki_gr60Match-

Node

ciscomeraki_mr12_firmwareMatch-

AND

ciscomeraki_mr12Match-

Node

ciscomeraki_mr20_firmwareMatch-

AND

ciscomeraki_mr20Match-

Node

ciscomeraki_mr26_firmwareMatch-

AND

ciscomeraki_mr26Match-

Node

ciscomeraki_mr30h_firmwareMatch-

AND

ciscomeraki_mr30hMatch-

Node

ciscomeraki_mr32_firmwareMatch-

AND

ciscomeraki_mr32Match-

Node

ciscomeraki_mr33_firmwareMatch-

AND

ciscomeraki_mr33Match-

Node

ciscomeraki_mr34_firmwareMatch-

AND

ciscomeraki_mr34Match-

Node

ciscomeraki_mr36_firmwareMatch-

AND

ciscomeraki_mr36Match-

Node

ciscomeraki_mr42_firmwareMatch-

AND

ciscomeraki_mr42Match-

Node

ciscomeraki_mr42e_firmwareMatch-

AND

ciscomeraki_mr42eMatch-

Node

ciscomeraki_mr44_firmwareMatch-

AND

ciscomeraki_mr44Match-

Node

ciscomeraki_mr45_firmwareMatch-

AND

ciscomeraki_mr45Match-

Node

ciscomeraki_mr46_firmwareMatch-

AND

ciscomeraki_mr46Match-

Node

ciscomeraki_mr46e_firmwareMatch-

AND

ciscomeraki_mr46eMatch-

Node

ciscomeraki_mr52_firmwareMatch-

AND

ciscomeraki_mr52Match-

Node

ciscomeraki_mr53_firmwareMatch-

AND

ciscomeraki_mr53Match-

Node

ciscomeraki_mr53e_firmwareMatch-

AND

ciscomeraki_mr53eMatch-

Node

ciscomeraki_mr55_firmwareMatch-

AND

ciscomeraki_mr55Match-

Node

ciscomeraki_mr56_firmwareMatch-

AND

ciscomeraki_mr56Match-

Node

ciscomeraki_mr62_firmwareMatch-

AND

ciscomeraki_mr62Match-

Node

ciscomeraki_mr66_firmwareMatch-

AND

ciscomeraki_mr66Match-

Node

ciscomeraki_mr70_firmwareMatch-

AND

ciscomeraki_mr70Match-

Node

ciscomeraki_mr72_firmwareMatch-

AND

ciscomeraki_mr72Match-

Node

ciscomeraki_mr74_firmwareMatch-

AND

ciscomeraki_mr74Match-

Node

ciscomeraki_mr76_firmwareMatch-

AND

ciscomeraki_mr76Match-

Node

ciscomeraki_mr84_firmwareMatch-

AND

ciscomeraki_mr84Match-

Node

ciscomeraki_mr86_firmwareMatch-

AND

ciscomeraki_mr86Match-

Node

ciscomeraki_mx64w_firmwareMatch-

AND

ciscomeraki_mx64wMatch-

Node

ciscomeraki_mx65w_firmwareMatch-

AND

ciscomeraki_mx65wMatch-

Node

ciscomeraki_mx67cw_firmwareMatch-

AND

ciscomeraki_mx67cwMatch-

Node

ciscomeraki_mx67w_firmwareMatch-

AND

ciscomeraki_mx67wMatch-

Node

ciscomeraki_mx68cw_firmwareMatch-

AND

ciscomeraki_mx68cwMatch-

Node

ciscomeraki_mx68w_firmwareMatch-

AND

ciscomeraki_mx68wMatch-

Node

ciscomeraki_z3_firmwareMatch-

AND

ciscomeraki_z3Match-

Node

ciscomeraki_z3c_firmwareMatch-

AND

ciscomeraki_z3cMatch-

Node

ciscowebex_board_55_firmwareMatch-

AND

ciscowebex_board_55Match-

Node

ciscowebex_board_55s_firmwareMatch-

AND

ciscowebex_board_55sMatch-

Node

ciscowebex_board_70_firmwareMatch-

AND

ciscowebex_board_70Match-

Node

ciscowebex_board_70s_firmwareMatch-

AND

ciscowebex_board_70sMatch-

Node

ciscowebex_board_85s_firmwareMatch-

AND

ciscowebex_board_85sMatch-

Node

ciscowebex_dx70_firmwareMatch-

AND

ciscowebex_dx70Match-

Node

ciscowebex_dx80_firmwareMatch-

AND

ciscowebex_dx80Match-

Node

ciscowebex_room_55_firmwareMatch-

AND

ciscowebex_room_55Match-

Node

ciscowebex_room_55_dual_firmwareMatch-

AND

ciscowebex_room_55_dualMatch-

Node

ciscowebex_room_70_firmwareMatch-

AND

ciscowebex_room_70Match-

Node

ciscowebex_room_70_dual_firmwareMatch-

AND

ciscowebex_room_70_dualMatch-

Node

ciscowebex_room_70_dual_g2_firmwareMatch-

AND

ciscowebex_room_70_dual_g2Match-

Node

ciscowebex_room_70_single_firmwareMatch-

AND

ciscowebex_room_70_singleMatch-

Node

ciscowebex_room_70_single_g2_firmwareMatch-

AND

ciscowebex_room_70_single_g2Match-

Node

ciscowebex_room_kit_firmwareMatch-

AND

ciscowebex_room_kitMatch-

Node

ciscowebex_room_kit_mini_firmwareMatch-

AND

ciscowebex_room_kit_miniMatch-

Node

intelac_8260_firmwareMatch-

AND

intelac_8260Match-

Node

intelac_8265_firmwareMatch-

AND

intelac_8265Match-

Node

intelac_9260_firmwareMatch-

AND

intelac_9260Match-

Node

intelac_9560_firmwareMatch-

AND

intelac_9560Match-

Node

intelkiller_ac_1550_firmwareMatch-

AND

intelkiller_ac_1550Match-

Node

intelkiller_wi-fi_6_ax1650_firmwareMatch-

AND

intelkiller_wi-fi_6_ax1650Match-

Node

intelkiller_wi-fi_6e_ax1675_firmwareMatch-

AND

intelkiller_wi-fi_6e_ax1675Match-

Node

intelproset_ac_3165_firmwareMatch-

AND

intelproset_ac_3165Match-

Node

intelproset_ac_3168_firmwareMatch-

AND

intelproset_ac_3168Match-

Node

intelproset_ac_8260_firmwareMatch-

AND

intelproset_ac_8260Match-

Node

intelproset_ac_8265_firmwareMatch-

AND

intelproset_ac_8265Match-

Node

intelproset_ac_9260_firmwareMatch-

AND

intelproset_ac_9260Match-

Node

intelproset_ac_9461_firmwareMatch-

AND

intelproset_ac_9461Match-

Node

intelproset_ac_9462_firmwareMatch-

AND

intelproset_ac_9462Match-

Node

intelproset_ac_9560_firmwareMatch-

AND

intelproset_ac_9560Match-

Node

intelproset_wi-fi_6_ax200_firmwareMatch-

AND

intelproset_wi-fi_6_ax200Match-

Node

intelproset_wi-fi_6_ax201_firmwareMatch-

AND

intelproset_wi-fi_6_ax201Match-

Node

intelproset_wi-fi_6e_ax210_firmwareMatch-

AND

intelproset_wi-fi_6e_ax210Match-

Node

intelproset_wireless_7265_\(rev_d\)_firmwareMatch-

AND

intelproset_wireless_7265_\(rev_d\)Match-

Node

intelwi-fi_6_ax200_firmwareMatch-

AND

intelwi-fi_6_ax200Match-

Node

intelwi-fi_6_ax201_firmwareMatch-

AND

intelwi-fi_6_ax201Match-

Node

linuxlinux_kernelRange4.4–4.4.271

linuxlinux_kernelRange4.9–4.9.271

linuxlinux_kernelRange4.14–4.14.235

linuxlinux_kernelRange4.19–4.19.193

linuxlinux_kernelRange5.4–5.4.124

linuxlinux_kernelRange5.10–5.10.42

linuxlinux_kernelRange5.12–5.12.9

CPENameOperatorVersion
ieee:ieee_802.11ieee ieee 802.11eq*
linux:mac80211linux mac80211eq-

CPE	Name	Operator	Version
ieee:ieee_802.11	ieee ieee 802.11	eq	*
linux:mac80211	linux mac80211	eq	-

References

www.openwall.com/lists/oss-security/2021/05/11/12

github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

lists.debian.org/debian-lts-announce/2021/06/msg00019.html

lists.debian.org/debian-lts-announce/2021/06/msg00020.html

lists.debian.org/debian-lts-announce/2023/04/msg00002.html

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu

www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

www.fragattacks.com

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html

Social References

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:H/Au:N/C:P/I:N/A:N

2.6 Low

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.4%

JSON

CVE-2020-24587

Affected configurations

References

Social References

Related