2.6

CVE-2020-24587

Exploit

EPSS 0.3%
Published 11.05.2021 20:15:08
Last modified 21.11.2024 05:15:05
Source cve@mitre.org
Teams watchlist Login
Open Login

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

Affected products Warnungen 0 Metrics 3 CWE 1 References 12

Data is provided by the National Vulnerability Database (NVD)

Ieee ≫ Ieee 802.11

Linux ≫ Mac80211 Version-

Debian ≫ Debian Linux Version9.0

Arista ≫ C-100 Firmware Version-

Arista ≫ C-100 Version-

Arista ≫ C-110 Firmware Version-

Arista ≫ C-110 Version-

Arista ≫ C-120 Firmware Version-

Arista ≫ C-120 Version-

Arista ≫ C-130 Firmware Version-

Arista ≫ C-130 Version-

Arista ≫ C-200 Firmware Version-

Arista ≫ C-200 Version-

Arista ≫ C-230 Firmware Version-

Arista ≫ C-230 Version-

Arista ≫ C-235 Firmware Version-

Arista ≫ C-235 Version-

Arista ≫ C-250 Firmware Version-

Arista ≫ C-250 Version-

Arista ≫ C-260 Firmware Version-

Arista ≫ C-260 Version-

Arista ≫ C-65 Firmware Version-

Arista ≫ C-65 Version-

Arista ≫ C-75 Firmware Version-

Arista ≫ C-75 Version-

Arista ≫ O-105 Firmware Version-

Arista ≫ O-105 Version-

Arista ≫ O-90 Firmware Version-

Arista ≫ O-90 Version-

Arista ≫ W-118 Firmware Version-

Arista ≫ W-118 Version-

Arista ≫ W-68 Firmware Version-

Arista ≫ W-68 Version-

Cisco ≫ 1100 Firmware Version-

Cisco ≫ 1100 Version-

Cisco ≫ 1100-4p Firmware Version-

Cisco ≫ 1100-4p Version-

Cisco ≫ 1100-8p Firmware Version-

Cisco ≫ 1100-8p Version-

Cisco ≫ 1101-4p Firmware Version-

Cisco ≫ 1101-4p Version-

Cisco ≫ 1109-2p Firmware Version-

Cisco ≫ 1109-2p Version-

Cisco ≫ 1109-4p Firmware Version-

Cisco ≫ 1109-4p Version-

Cisco ≫ Aironet 1532 Firmware Version-

Cisco ≫ Aironet 1532 Version-

Cisco ≫ Aironet 1542d Firmware Version-

Cisco ≫ Aironet 1542d Version-

Cisco ≫ Aironet 1542i Firmware Version-

Cisco ≫ Aironet 1542i Version-

Cisco ≫ Aironet 1552 Firmware Version-

Cisco ≫ Aironet 1552 Version-

Cisco ≫ Aironet 1552h Firmware Version-

Cisco ≫ Aironet 1552h Version-

Cisco ≫ Aironet 1572 Firmware Version-

Cisco ≫ Aironet 1572 Version-

Cisco ≫ Aironet 1702 Firmware Version-

Cisco ≫ Aironet 1702 Version-

Cisco ≫ Aironet 1800 Firmware Version-

Cisco ≫ Aironet 1800 Version-

Cisco ≫ Aironet 1800i Firmware Version-

Cisco ≫ Aironet 1800i Version-

Cisco ≫ Aironet 1810 Firmware Version-

Cisco ≫ Aironet 1810 Version-

Cisco ≫ Aironet 1810w Firmware Version-

Cisco ≫ Aironet 1810w Version-

Cisco ≫ Aironet 1815 Firmware Version-

Cisco ≫ Aironet 1815 Version-

Cisco ≫ Aironet 1815i Firmware Version-

Cisco ≫ Aironet 1815i Version-

Cisco ≫ Aironet 1832 Firmware Version-

Cisco ≫ Aironet 1832 Version-

Cisco ≫ Aironet 1842 Firmware Version-

Cisco ≫ Aironet 1842 Version-

Cisco ≫ Aironet 1852 Firmware Version-

Cisco ≫ Aironet 1852 Version-

Cisco ≫ Aironet 2702 Firmware Version-

Cisco ≫ Aironet 2702 Version-

Cisco ≫ Aironet 2800 Firmware Version-

Cisco ≫ Aironet 2800 Version-

Cisco ≫ Aironet 2800e Firmware Version-

Cisco ≫ Aironet 2800e Version-

Cisco ≫ Aironet 2800i Firmware Version-

Cisco ≫ Aironet 2800i Version-

Cisco ≫ Aironet 3702 Firmware Version-

Cisco ≫ Aironet 3702 Version-

Cisco ≫ Aironet 3800 Firmware Version-

Cisco ≫ Aironet 3800 Version-

Cisco ≫ Aironet 3800e Firmware Version-

Cisco ≫ Aironet 3800e Version-

Cisco ≫ Aironet 3800i Firmware Version-

Cisco ≫ Aironet 3800i Version-

Cisco ≫ Aironet 3800p Firmware Version-

Cisco ≫ Aironet 3800p Version-

Cisco ≫ Aironet 4800 Firmware Version-

Cisco ≫ Aironet 4800 Version-

Cisco ≫ Aironet Ap803 Firmware Version-

Cisco ≫ Aironet Ap803 Version-

Cisco ≫ Aironet Iw3702 Firmware Version-

Cisco ≫ Aironet Iw3702 Version-

Cisco ≫ Catalyst 9105 Firmware Version-

Cisco ≫ Catalyst 9105 Version-

Cisco ≫ Catalyst 9105axi Firmware Version-

Cisco ≫ Catalyst 9105axi Version-

Cisco ≫ Catalyst 9105axw Firmware Version-

Cisco ≫ Catalyst 9105axw Version-

Cisco ≫ Catalyst 9115 Firmware Version-

Cisco ≫ Catalyst 9115 Version-

Cisco ≫ Catalyst 9115 Ap Firmware Version-

Cisco ≫ Catalyst 9115 Ap Version-

Cisco ≫ Catalyst 9115axe Firmware Version-

Cisco ≫ Catalyst 9115axe Version-

Cisco ≫ Catalyst 9115axi Firmware Version-

Cisco ≫ Catalyst 9115axi Version-

Cisco ≫ Catalyst 9117 Firmware Version-

Cisco ≫ Catalyst 9117 Version-

Cisco ≫ Catalyst 9117 Ap Firmware Version-

Cisco ≫ Catalyst 9117 Ap Version-

Cisco ≫ Catalyst 9117axi Firmware Version-

Cisco ≫ Catalyst 9117axi Version-

Cisco ≫ Catalyst 9120 Firmware Version-

Cisco ≫ Catalyst 9120 Version-

Cisco ≫ Catalyst 9120 Ap Firmware Version-

Cisco ≫ Catalyst 9120 Ap Version-

Cisco ≫ Catalyst 9120axe Firmware Version-

Cisco ≫ Catalyst 9120axe Version-

Cisco ≫ Catalyst 9120axi Firmware Version-

Cisco ≫ Catalyst 9120axi Version-

Cisco ≫ Catalyst 9120axp Firmware Version-

Cisco ≫ Catalyst 9120axp Version-

Cisco ≫ Catalyst 9124 Firmware Version-

Cisco ≫ Catalyst 9124 Version-

Cisco ≫ Catalyst 9124axd Firmware Version-

Cisco ≫ Catalyst 9124axd Version-

Cisco ≫ Catalyst 9124axi Firmware Version-

Cisco ≫ Catalyst 9124axi Version-

Cisco ≫ Catalyst 9130 Firmware Version-

Cisco ≫ Catalyst 9130 Version-

Cisco ≫ Catalyst 9130 Ap Firmware Version-

Cisco ≫ Catalyst 9130 Ap Version-

Cisco ≫ Catalyst 9130axe Firmware Version-

Cisco ≫ Catalyst 9130axe Version-

Cisco ≫ Catalyst 9130axi Firmware Version-

Cisco ≫ Catalyst 9130axi Version-

Cisco ≫ Catalyst Iw6300 Firmware Version-

Cisco ≫ Catalyst Iw6300 Version-

Cisco ≫ Catalyst Iw6300 Ac Firmware Version-

Cisco ≫ Catalyst Iw6300 Ac Version-

Cisco ≫ Catalyst Iw6300 Dc Firmware Version-

Cisco ≫ Catalyst Iw6300 Dc Version-

Cisco ≫ Catalyst Iw6300 Dcw Firmware Version-

Cisco ≫ Catalyst Iw6300 Dcw Version-

Cisco ≫ Esw6300 Firmware Version-

Cisco ≫ Esw6300 Version-

Cisco ≫ Ip Phone 6861 Firmware Version-

Cisco ≫ Ip Phone 6861 Version-

Cisco ≫ Ip Phone 8821 Firmware Version-

Cisco ≫ Ip Phone 8821 Version-

Cisco ≫ Ip Phone 8832 Firmware Version-

Cisco ≫ Ip Phone 8832 Version-

Cisco ≫ Ip Phone 8861 Firmware Version-

Cisco ≫ Ip Phone 8861 Version-

Cisco ≫ Ip Phone 8865 Firmware Version-

Cisco ≫ Ip Phone 8865 Version-

Cisco ≫ Ir829-2lte-ea-ak9 Firmware Version-

Cisco ≫ Ir829-2lte-ea-ak9 Version-

Cisco ≫ Ir829-2lte-ea-bk9 Firmware Version-

Cisco ≫ Ir829-2lte-ea-bk9 Version-

Cisco ≫ Ir829-2lte-ea-ek9 Firmware Version-

Cisco ≫ Ir829-2lte-ea-ek9 Version-

Cisco ≫ Ir829gw-lte-ga-ck9 Firmware Version-

Cisco ≫ Ir829gw-lte-ga-ck9 Version-

Cisco ≫ Ir829gw-lte-ga-ek9 Firmware Version-

Cisco ≫ Ir829gw-lte-ga-ek9 Version-

Cisco ≫ Ir829gw-lte-ga-sk9 Firmware Version-

Cisco ≫ Ir829gw-lte-ga-sk9 Version-

Cisco ≫ Ir829gw-lte-ga-zk9 Firmware Version-

Cisco ≫ Ir829gw-lte-ga-zk9 Version-

Cisco ≫ Ir829gw-lte-na-ak9 Firmware Version-

Cisco ≫ Ir829gw-lte-na-ak9 Version-

Cisco ≫ Ir829gw-lte-vz-ak9 Firmware Version-

Cisco ≫ Ir829gw-lte-vz-ak9 Version-

Cisco ≫ Meraki Gr10 Firmware Version-

Cisco ≫ Meraki Gr10 Version-

Cisco ≫ Meraki Gr60 Firmware Version-

Cisco ≫ Meraki Gr60 Version-

Cisco ≫ Meraki Mr12 Firmware Version-

Cisco ≫ Meraki Mr12 Version-

Cisco ≫ Meraki Mr20 Firmware Version-

Cisco ≫ Meraki Mr20 Version-

Cisco ≫ Meraki Mr26 Firmware Version-

Cisco ≫ Meraki Mr26 Version-

Cisco ≫ Meraki Mr30h Firmware Version-

Cisco ≫ Meraki Mr30h Version-

Cisco ≫ Meraki Mr32 Firmware Version-

Cisco ≫ Meraki Mr32 Version-

Cisco ≫ Meraki Mr33 Firmware Version-

Cisco ≫ Meraki Mr33 Version-

Cisco ≫ Meraki Mr34 Firmware Version-

Cisco ≫ Meraki Mr34 Version-

Cisco ≫ Meraki Mr36 Firmware Version-

Cisco ≫ Meraki Mr36 Version-

Cisco ≫ Meraki Mr42 Firmware Version-

Cisco ≫ Meraki Mr42 Version-

Cisco ≫ Meraki Mr42e Firmware Version-

Cisco ≫ Meraki Mr42e Version-

Cisco ≫ Meraki Mr44 Firmware Version-

Cisco ≫ Meraki Mr44 Version-

Cisco ≫ Meraki Mr45 Firmware Version-

Cisco ≫ Meraki Mr45 Version-

Cisco ≫ Meraki Mr46 Firmware Version-

Cisco ≫ Meraki Mr46 Version-

Cisco ≫ Meraki Mr46e Firmware Version-

Cisco ≫ Meraki Mr46e Version-

Cisco ≫ Meraki Mr52 Firmware Version-

Cisco ≫ Meraki Mr52 Version-

Cisco ≫ Meraki Mr53 Firmware Version-

Cisco ≫ Meraki Mr53 Version-

Cisco ≫ Meraki Mr53e Firmware Version-

Cisco ≫ Meraki Mr53e Version-

Cisco ≫ Meraki Mr55 Firmware Version-

Cisco ≫ Meraki Mr55 Version-

Cisco ≫ Meraki Mr56 Firmware Version-

Cisco ≫ Meraki Mr56 Version-

Cisco ≫ Meraki Mr62 Firmware Version-

Cisco ≫ Meraki Mr62 Version-

Cisco ≫ Meraki Mr66 Firmware Version-

Cisco ≫ Meraki Mr66 Version-

Cisco ≫ Meraki Mr70 Firmware Version-

Cisco ≫ Meraki Mr70 Version-

Cisco ≫ Meraki Mr72 Firmware Version-

Cisco ≫ Meraki Mr72 Version-

Cisco ≫ Meraki Mr74 Firmware Version-

Cisco ≫ Meraki Mr74 Version-

Cisco ≫ Meraki Mr76 Firmware Version-

Cisco ≫ Meraki Mr76 Version-

Cisco ≫ Meraki Mr84 Firmware Version-

Cisco ≫ Meraki Mr84 Version-

Cisco ≫ Meraki Mr86 Firmware Version-

Cisco ≫ Meraki Mr86 Version-

Cisco ≫ Meraki Mx64w Firmware Version-

Cisco ≫ Meraki Mx64w Version-

Cisco ≫ Meraki Mx65w Firmware Version-

Cisco ≫ Meraki Mx65w Version-

Cisco ≫ Meraki Mx67cw Firmware Version-

Cisco ≫ Meraki Mx67cw Version-

Cisco ≫ Meraki Mx67w Firmware Version-

Cisco ≫ Meraki Mx67w Version-

Cisco ≫ Meraki Mx68cw Firmware Version-

Cisco ≫ Meraki Mx68cw Version-

Cisco ≫ Meraki Mx68w Firmware Version-

Cisco ≫ Meraki Mx68w Version-

Cisco ≫ Meraki Z3 Firmware Version-

Cisco ≫ Meraki Z3 Version-

Cisco ≫ Meraki Z3c Firmware Version-

Cisco ≫ Meraki Z3c Version-

Cisco ≫ Webex Board 55 Firmware Version-

Cisco ≫ Webex Board 55 Version-

Cisco ≫ Webex Board 55s Firmware Version-

Cisco ≫ Webex Board 55s Version-

Cisco ≫ Webex Board 70 Firmware Version-

Cisco ≫ Webex Board 70 Version-

Cisco ≫ Webex Board 70s Firmware Version-

Cisco ≫ Webex Board 70s Version-

Cisco ≫ Webex Board 85s Firmware Version-

Cisco ≫ Webex Board 85s Version-

Cisco ≫ Webex Dx70 Firmware Version-

Cisco ≫ Webex Dx70 Version-

Cisco ≫ Webex Dx80 Firmware Version-

Cisco ≫ Webex Dx80 Version-

Cisco ≫ Webex Room 55 Firmware Version-

Cisco ≫ Webex Room 55 Version-

Cisco ≫ Webex Room 55 Dual Firmware Version-

Cisco ≫ Webex Room 55 Dual Version-

Cisco ≫ Webex Room 70 Firmware Version-

Cisco ≫ Webex Room 70 Version-

Cisco ≫ Webex Room 70 Dual Firmware Version-

Cisco ≫ Webex Room 70 Dual Version-

Cisco ≫ Webex Room 70 Dual G2 Firmware Version-

Cisco ≫ Webex Room 70 Dual G2 Version-

Cisco ≫ Webex Room 70 Single Firmware Version-

Cisco ≫ Webex Room 70 Single Version-

Cisco ≫ Webex Room 70 Single G2 Firmware Version-

Cisco ≫ Webex Room 70 Single G2 Version-

Cisco ≫ Webex Room Kit Firmware Version-

Cisco ≫ Webex Room Kit Version-

Cisco ≫ Webex Room Kit Mini Firmware Version-

Cisco ≫ Webex Room Kit Mini Version-

Intel ≫ Ac 8260 Firmware Version-

Intel ≫ Ac 8260 Version-

Intel ≫ Ac 8265 Firmware Version-

Intel ≫ Ac 8265 Version-

Intel ≫ Ac 9260 Firmware Version-

Intel ≫ Ac 9260 Version-

Intel ≫ Ac 9560 Firmware Version-

Intel ≫ Ac 9560 Version-

Intel ≫ Killer Ac 1550 Firmware Version-

Intel ≫ Killer Ac 1550 Version-

Intel ≫ Killer Wi-fi 6 Ax1650 Firmware Version-

Intel ≫ Killer Wi-fi 6 Ax1650 Version-

Intel ≫ Killer Wi-fi 6e Ax1675 Firmware Version-

Intel ≫ Killer Wi-fi 6e Ax1675 Version-

Intel ≫ Proset Ac 3165 Firmware Version-

Intel ≫ Proset Ac 3165 Version-

Intel ≫ Proset Ac 3168 Firmware Version-

Intel ≫ Proset Ac 3168 Version-

Intel ≫ Proset Ac 8260 Firmware Version-

Intel ≫ Proset Ac 8260 Version-

Intel ≫ Proset Ac 8265 Firmware Version-

Intel ≫ Proset Ac 8265 Version-

Intel ≫ Proset Ac 9260 Firmware Version-

Intel ≫ Proset Ac 9260 Version-

Intel ≫ Proset Ac 9461 Firmware Version-

Intel ≫ Proset Ac 9461 Version-

Intel ≫ Proset Ac 9462 Firmware Version-

Intel ≫ Proset Ac 9462 Version-

Intel ≫ Proset Ac 9560 Firmware Version-

Intel ≫ Proset Ac 9560 Version-

Intel ≫ Proset Wi-fi 6 Ax200 Firmware Version-

Intel ≫ Proset Wi-fi 6 Ax200 Version-

Intel ≫ Proset Wi-fi 6 Ax201 Firmware Version-

Intel ≫ Proset Wi-fi 6 Ax201 Version-

Intel ≫ Proset Wi-fi 6e Ax210 Firmware Version-

Intel ≫ Proset Wi-fi 6e Ax210 Version-

Intel ≫ Proset Wireless 7265 (rev D) Firmware Version-

Intel ≫ Proset Wireless 7265 (rev D) Version-

Intel ≫ Wi-fi 6 Ax200 Firmware Version-

Intel ≫ Wi-fi 6 Ax200 Version-

Intel ≫ Wi-fi 6 Ax201 Firmware Version-

Intel ≫ Wi-fi 6 Ax201 Version-

Linux ≫ Linux Kernel Version >= 4.4 < 4.4.271

Linux ≫ Linux Kernel Version >= 4.9 < 4.9.271

Linux ≫ Linux Kernel Version >= 4.14 < 4.14.235

Linux ≫ Linux Kernel Version >= 4.19 < 4.19.193

Linux ≫ Linux Kernel Version >= 5.4 < 5.4.124

Linux ≫ Linux Kernel Version >= 5.10 < 5.10.42

Linux ≫ Linux Kernel Version >= 5.12 < 5.12.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.3%	0.53

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.6	1.2	1.4	CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
nvd@nist.gov	1.8	3.2	2.9	AV:A/AC:H/Au:N/C:P/I:N/A:N

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html

http://www.openwall.com/lists/oss-security/2021/05/11/12

Third Party Advisory

Mailing List

https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu

Third Party Advisory

https://www.fragattacks.com

Third Party Advisory

Exploit

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-24587

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-24587

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-24587

EUVD