CVE-2020-24588: arista c-100_firmware

Modified

AliasesUBUNTU-CVE-2020-24588DEBIAN-CVE-2020-24588

Published 11-05-2021Last modified 14-04-2026

Vulnerability summary

CVE-2020-24588 is a low (CVSS 3.5) vulnerability in arista c-100_firmware. EPSS estimates a 3.61% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 3.5, adjacent network); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

3.5/10

010

Low · v3.1 (NVD)

EPSS score

3.61%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Timeline

11-05-2021
PublishedVulnerability first disclosed.
14-04-2026
Last modifiedVulnerability information updated.

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.13.5v2.02.9

EPSS trend

Probability

3.61%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.61% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (fragattacks.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-327Use of a Broken or Risky Cryptographic AlgorithmThe product uses a broken or risky cryptographic algorithm or protocol.

Affected systems

Version check

Known conditions: adjacent network, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Cisco109 products

Show all 109

Ubuntu54 products

linuxAll versions (No fix recorded) | < 4.15.0-151.157 | < 5.4.0-77.86
linux-awsAll versions (No fix recorded) | < 4.15.0-1109.116 | < 5.4.0-1051.53
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1051.53~18.04.1

linux-aws-5.8< 5.8.0-1038.40~20.04.1
linux-aws-fips< 4.15.0-2051.53 | All versions (No fix recorded) | < 5.4.0-1069.73+fips2
linux-aws-hwe< 4.15.0-1109.116~16.04.1
linux-azure< 4.15.0-1121.134~14.04.1 | < 4.15.0-1121.134~16.04.1 | All versions (No fix recorded) | < 5.4.0-1051.53
linux-azure-4.15< 4.15.0-1121.134
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1051.53~18.04.1
linux-azure-5.8< 5.8.0-1036.38~20.04.1
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fde-5.15< 5.15.0-1114.123~20.04.1
linux-azure-fips< 4.15.0-2033.37 | All versions (No fix recorded) | < 5.4.0-1073.76+fips1
linux-bluefield< 5.4.0-1013.16
linux-dell300x< 4.15.0-1027.32
linux-fipsAll versions (No fix recorded) | < 4.15.0-1066.75 | < 5.4.0-1028.32
linux-gcp< 4.15.0-1106.120~16.04.1 | All versions (No fix recorded) | < 5.4.0-1046.49
linux-gcp-4.15< 4.15.0-1106.120
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1046.49~18.04.1
linux-gcp-5.8< 5.8.0-1035.37~20.04.1
linux-gcp-edgeAll versions (No fix recorded)
linux-gcp-fips< 4.15.0-2016.18 | All versions (No fix recorded) | < 5.4.0-1067.71~20.04.1
linux-gke< 5.4.0-1046.48
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.4< 5.4.0-1046.48~18.04.1
linux-gkeop< 5.4.0-1018.19
linux-gkeop-5.4< 5.4.0-1018.19~18.04.1
linux-hwe< 4.15.0-151.157~16.04.1 | All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-77.86~18.04.1
linux-hwe-5.8< 5.8.0-59.66~20.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded)
linux-kvmAll versions (No fix recorded) | < 4.15.0-1097.99 | < 5.4.0-1041.42
linux-lts-xenialAll versions (No fix recorded)
linux-oemAll versions (No fix recorded)
linux-oem-5.10< 5.10.0-1032.33
linux-oem-5.6All versions (No fix recorded)
linux-oracle< 4.15.0-1078.86~16.04.1 | < 4.15.0-1078.86 | < 5.4.0-1048.52
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1048.52~18.04.1
linux-oracle-5.8< 5.8.0-1033.34~20.04.1
linux-raspi< 5.4.0-1038.41
linux-raspi-5.4< 5.4.0-1038.41~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2< 4.15.0-1092.98 | All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded)
linux-riscvAll versions (No fix recorded)
linux-riscv-5.8< 5.8.0-29.31~20.04.1
linux-snapdragon< 4.15.0-1109.118

Show all 54

Intel19 products

Show all 19

Arista15 products

Show all 15

Debian3 products

firmware-nonfree< 20210818-1
linux< 5.10.46-1
debian_linuxEOL9.0

5 vendors · 200 products · Showing 200 of 236

References

22 links

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.htmlThird Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuVendor AdvisoryThird Party Advisory
www.fragattacks.comExploitThird Party Advisory
github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
www.openwall.com/lists/oss-security/2021/05/11/12Mailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing ListThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
lists.debian.org/debian-lts-announce/2023/04/msg00002.htmlMailing List

Show all 22 references