3.5
CVE-2020-24586
- EPSS 0.22%
- Veröffentlicht 11.05.2021 20:15:08
- Zuletzt bearbeitet 21.11.2024 05:15:03
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version9.0
Arista ≫ C-250 Firmware Version < 10.0.1-31
Arista ≫ C-260 Firmware Version < 10.0.1-31
Arista ≫ C-230 Firmware Version < 10.0.1-31
Arista ≫ C-235 Firmware Version < 10.0.1-31
Arista ≫ C-200 Firmware Version < 11.0.0-36
Intel ≫ Ax210 Firmware Version < 22.30.0.11
Intel ≫ Ax201 Firmware Version < 22.30.0.11
Intel ≫ Ax200 Firmware Version < 22.30.0.11
Intel ≫ Ac 9560 Firmware Version < 22.30.0.11
Intel ≫ Ac 9462 Firmware Version < 22.30.0.11
Intel ≫ Ac 9461 Firmware Version < 22.30.0.11
Intel ≫ Ac 9260 Firmware Version < 22.30.0.11
Intel ≫ Ac 8265 Firmware Version < 20.70.21.2
Intel ≫ Ac 8260 Firmware Version < 20.70.21.2
Intel ≫ Ac 3168 Firmware Version < 19.51.33.1
Intel ≫ Ac 7265 Firmware Version < 19.51.33.1
Intel ≫ Ac 3165 Firmware Version < 19.51.33.1
Intel ≫ Ax1675 Firmware Version-
Intel ≫ Ax1650 Firmware Version-
Intel ≫ Ac 1550 Firmware Version-
Linux ≫ Linux Kernel Version >= 4.4 < 4.4.271
Linux ≫ Linux Kernel Version >= 4.9 < 4.9.271
Linux ≫ Linux Kernel Version >= 4.14 < 4.14.235
Linux ≫ Linux Kernel Version >= 4.19 < 4.19.193
Linux ≫ Linux Kernel Version >= 5.4 < 5.4.124
Linux ≫ Linux Kernel Version >= 5.10 < 5.10.42
Linux ≫ Linux Kernel Version >= 5.12 < 5.12.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.449 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 3.5 | 2.1 | 1.4 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 2.9 | 5.5 | 2.9 |
AV:A/AC:M/Au:N/C:P/I:N/A:N
|