← Back

CVE-2020-26143

nvd nist
Published: May 11, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

Affected (6)

Alfa
1 product
Awus036h Firmware
Arista
4 products
C 75 Firmware
O 90 Firmware
C 65 Firmware
W 68 Firmware
Siemens
1 product
Scalance W700 Ieee 802.11n Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Awus036h Firmware
Version 1030.36.604
Running on/withPlatform Versions
Alfa
Awus036h
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C 75 Firmware
All versions
Running on/withPlatform Versions
Arista
C 75
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
O 90 Firmware
All versions
Running on/withPlatform Versions
Arista
O 90
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C 65 Firmware
All versions
Running on/withPlatform Versions
Arista
C 65
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
W 68 Firmware
All versions
Running on/withPlatform Versions
Arista
W 68
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance W700 Ieee 802.11n Firmware
All versions
Running on/withPlatform Versions
Siemens
Scalance W700 Ieee 802.11n
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.