Medium severity · published May 11, 2021
CVE-2020-26141
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H
6.5
CVSS
3.1%
EPSS
No
On KEV
Description
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
6F
6gk5721-1fc00-0aa0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5721-1fc00-0ab0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5722-1fc00-0aa0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5722-1fc00-0ab0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5722-1fc00-0ac0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5734-1fx00-0aa0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5734-1fx00-0aa6 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5734-1fx00-0ab0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5734-1fx00-0ab6 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5778-1gy00-0aa0 Firmware · Siemens
All versions, or not specified · source: NVD
6F
6gk5778-1gy00-0ab0 Firmware · Siemens
All versions, or not specified · source: NVD
AF
Awus036h Firmware · Alfa
6.1316.1209 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-26141
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-26141
Mailing List
http://www.openwall.com/lists/oss-security/2021/05/11/12
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
Third Party Advisory
https://www.fragattacks.com
More from Awus036h Firmware
6.5
CVE-2020-26143
An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH
6.5
CVE-2020-26140
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H