Medium severity · published May 11, 2021
CVE-2020-26139
An issue was discovered in the kernel in NetBSD 7.1
5.3
CVSS
6.5%
EPSS
No
On KEV
Description
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1F
1100 Firmware · Cisco
All versions, or not specified · source: NVD
1F
1100-4p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1100-8p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1101-4p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1109-2p Firmware · Cisco
All versions, or not specified · source: NVD
1F
1109-4p Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1532 Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1542d Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1542i Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1552 Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1552h Firmware · Cisco
All versions, or not specified · source: NVD
A1
Aironet 1572 Firmware · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-26139
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-26139
Mailing List
http://www.openwall.com/lists/oss-security/2021/05/11/12
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
Mailing List
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Mailing List
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
More from C-100 Firmware
6.5
CVE-2020-26140
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H
6.5
CVE-2020-26144
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices
5.3
CVE-2020-26146
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices
3.5
CVE-2020-24588
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header…
2.6
CVE-2020-24587
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted…