← Back

CVE-2020-26147

nvd nist
Published: May 11, 2021Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N
Exploitability: 1.2 / Impact: 4.2
Source: NVD

Description

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

Affected (14)

Show all products
Linux: Linux Kernel · Debian: Debian Linux · Arista: C 75 Firmware, O 90 Firmware, C 65 Firmware, W 68 Firmware · Siemens: Scalance W700 Ieee 802.11n Firmware, Scalance W1700 Ieee 802.11ac Firmware
Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Arista
4 products
C 75 Firmware
O 90 Firmware
C 65 Firmware
W 68 Firmware
Siemens
2 products
Scalance W700 Ieee 802.11n Firmware
Scalance W1700 Ieee 802.11ac Firmware
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 4.14 to 4.14.235
Linux Kernel
From 4.19 to 4.19.193
Linux Kernel
From 4.4 to 4.4.271
Linux Kernel
From 4.9 to 4.9.271
Linux Kernel
From 5.10 to 5.10.42
Linux Kernel
From 5.12 to 5.12.9
Linux Kernel
From 5.4 to 5.4.124
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C 75 Firmware
All versions
Running on/withPlatform Versions
Arista
C 75
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
O 90 Firmware
All versions
Running on/withPlatform Versions
Arista
O 90
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C 65 Firmware
All versions
Running on/withPlatform Versions
Arista
C 65
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
W 68 Firmware
All versions
Running on/withPlatform Versions
Arista
W 68
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance W700 Ieee 802.11n Firmware
All versions
Running on/withPlatform Versions
Siemens
Scalance W700 Ieee 802.11n
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance W1700 Ieee 802.11ac Firmware
All versions
Running on/withPlatform Versions
Siemens
Scalance W1700 Ieee 802.11ac
All versions

References (18)

Source: cve@mitre.org
Mailing ListPatchThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.