CVE-2020-24586

Advisory lineage Upstream: 0 Downstream: 35
Modified
Published: 11 May 2021, 00:00
Last modified:04 Aug 2024, 15:19

Vulnerability Summary

Overall Risk (default)
low
24/100
CVSS Score
3.5 LOW
v3.1 (nvd)
EPSS Score
1.46% LOW
1% probability +0.92%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

11 May 2021, 00:00
Published
Vulnerability first disclosed
04 Aug 2024, 15:19
Last Modified
Vulnerability information updated

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

CVSS Metrics

  • v3.1•LOW•Score: 3.5CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
  • v2.0•LOW•Score: 2.9AV:A/AC:M/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 1.46%• Percentile: 81%

Affected Systems

  • arista•c-200_firmware

    < 11.0.0-36

  • arista•c-230_firmware

    < 10.0.1-31

  • arista•c-235_firmware

    < 10.0.1-31

  • arista•c-250_firmware

    < 10.0.1-31

  • arista•c-260_firmware

    < 10.0.1-31

  • debian•debian_linux

    9.0

  • intel•ac_1550_firmware

    na

  • intel•ac_3165_firmware

    < 19.51.33.1

  • intel•ac_3168_firmware

    < 19.51.33.1

  • intel•ac_7265_firmware

    < 19.51.33.1

  • intel•ac_8260_firmware

    < 20.70.21.2

  • intel•ac_8265_firmware

    < 20.70.21.2

  • intel•ac_9260_firmware

    < 22.30.0.11

  • intel•ac_9461_firmware

    < 22.30.0.11

  • intel•ac_9462_firmware

    < 22.30.0.11

  • intel•ac_9560_firmware

    < 22.30.0.11

  • intel•ax1650_firmware

    na

  • intel•ax1675_firmware

    na

  • intel•ax200_firmware

    < 22.30.0.11

  • intel•ax201_firmware

    < 22.30.0.11

  • intel•ax210_firmware

    < 22.30.0.11

  • linux•linux_kernel

    ≥ 4.4, < 4.4.271 | ≥ 4.9, < 4.9.271 | ≥ 4.14, < 4.14.235 | ≥ 4.19, < 4.19.193 | ≥ 5.4, < 5.4.124 | ≥ 5.10, < 5.10.42 | ≥ 5.12, < 5.12.9

  • linux•mac80211

    na

References (9)