Low severity · published May 11, 2021
CVE-2020-24587
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted…
2.6
CVSS
2.6%
EPSS
No
On KEV
Description
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1F
1100 Firmware · Cisco
All versions, or not specified · source: NVD
1F
1100-4p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1100-8p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1101-4p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1109-2p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1109-4p Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1532 Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1542d Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1542i Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1552 Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1552h Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1572 Firmware · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-24587
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-24587
Mailing List
http://www.openwall.com/lists/oss-security/2021/05/11/12
Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
Mailing List
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Mailing List
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
lists.debian.org
https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
More from C-100 Firmware
6.5
CVE-2020-26140
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H
6.5
CVE-2020-26144
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices
5.3
CVE-2020-26146
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices
5.3
CVE-2020-26139
An issue was discovered in the kernel in NetBSD 7.1
3.5
CVE-2020-24588
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header…