Lucene search
PRIOn knowledge basePRION:CVE-2020-24588HistoryMay 11, 2021 - 8:15 p.m.
Design/Logic Flaw
2021-05-1120:15:00
PRIOn knowledge base
www.prio-n.com
14
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
References
www.openwall.com/lists/oss-security/2021/05/11/12
cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
lists.debian.org/debian-lts-announce/2021/06/msg00019.html
lists.debian.org/debian-lts-announce/2021/06/msg00020.html
lists.debian.org/debian-lts-announce/2023/04/msg00002.html
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
www.fragattacks.com
www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html
Related
mscve
mscve
Windows Wireless Networking Spoofing Vulnerability
2021-05-11 07:00:00
veracode
veracode
Packet Injection
2021-11-17 22:37:10
ubuntucve
ubuntucve
CVE-2020-24588
2021-05-11 00:00:00
nvd
nvd
CVE-2020-24588
2021-05-11 20:15:08
cvelist
cvelist
CVE-2020-24588
2021-05-11 00:00:00
cve
cve
CVE-2020-24588
2021-05-11 20:15:08
debiancve
debiancve
CVE-2020-24588
2021-05-11 20:15:08
redhatcve
redhatcve
CVE-2020-24588
2021-05-13 05:56:34
nessus
nessus
Cisco Multiple Products Use of a Broken or Risky Cryptographic Algorithm (CVE-2020-24588)
2024-03-18 00:00:00
Siemens SCALANCE FragAttacks (CVE-2020-24588)
2023-04-11 00:00:00
openvas
openvas
AVM FRITZ!Box Multiple Wi-Fi Vulnerabilities (FragAttacks)
2021-05-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0394-1)
2023-02-14 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:0394-1)
2024-03-04 00:00:00
hp
hp
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:02.wifi
2022-03-15 00:00:00
lenovo
lenovo
freebsd
freebsd
FreeBSD-kernel -- Multiple WiFi issues
2022-03-15 00:00:00
intel
intel
ics
ics
Mitsubishi Electric GT25-WLAN (Update A)
2022-05-12 12:00:00
Siemens SCALANCE FragAttacks
2022-04-14 12:00:00
Hitachi ABB Power Grids TropOS
2021-08-24 12:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2021-06-14 00:32:39
Updated kernel-linus packages fix security vulnerabilities
2021-06-14 00:32:39
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2021-08-10 00:00:00
Unbreakable Enterprise kernel-container security update
2021-08-10 00:00:00
Unbreakable Enterprise kernel security update
2021-09-21 00:00:00
mskb
mskb
May 11, 2021—KB5003225 (Security-only update)
2021-05-11 07:00:00
May 11, 2021—KB5003203 (Security-only update)
2021-05-11 07:00:00
May 11, 2021—KB5003210 (Monthly Rollup)
2021-05-11 07:00:00
osv
osv
firmware-nonfree - security update
2023-04-01 00:00:00
linux-kvm vulnerabilities
2021-06-25 19:56:40
linux-oem-5.10 vulnerabilities
2021-06-23 03:45:22
debian
debian
[SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)
2023-04-01 20:16:41
[SECURITY] [DLA 2690-1] linux-4.19 security update
2021-06-23 00:05:06
[SECURITY] [DLA 2689-1] linux security update
2021-06-23 00:11:57
checkpoint_security
checkpoint_security
Check Point Response to Wi-Fi FragAttacks in Quantum Spark appliances
2021-06-09 23:24:30
threatpost
threatpost
‘FragAttacks’: Wi-Fi Bugs Affect Millions of Devices
2021-05-12 15:48:05
suse
suse
Security update for the Linux Kernel (important)
2021-07-01 00:00:00
Security update for the Linux Kernel (important)
2021-06-06 00:00:00
Security update for the Linux Kernel (important)
2021-07-21 00:00:00
malwarebytes
malwarebytes
FragAttack: New Wi-Fi vulnerabilities that affect… basically everything
2021-05-12 17:31:21
hackerone
hackerone
Internet Bug Bounty: Fragmentation and Aggregation Flaws in Wi-Fi
2021-06-19 21:24:25
kaspersky
kaspersky
KLA12167 Multiple vulnerabilities in Microsoft Products (ESU)
2021-05-11 00:00:00
KLA12174 Multiple vulnerabilities in Microsoft Windows
2021-05-11 00:00:00
cisco
cisco
thn
thn
Nearly All Wi-Fi Devices Are Vulnerable to New FragAttacks
2021-05-12 13:07:00
arista
arista
Security Advisory 0063
2021-05-25 00:00:00
cloudfoundry
cloudfoundry
USN-5000-1: Linux kernel vulnerabilities | Cloud Foundry
2021-07-08 00:00:00
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2021-06-23 00:00:00
Linux kernel vulnerabilities
2021-06-23 00:00:00
Linux kernel (KVM) vulnerabilities
2021-06-25 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2021-07-21 05:44:30
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
redhat
redhat
(RHSA-2021:4140) Moderate: kernel-rt security and bug fix update
2021-11-09 08:21:02
(RHSA-2021:4356) Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
rapid7blog
rapid7blog
Patch Tuesday - May 2021
2021-05-11 23:44:00
qualysblog
qualysblog