CVE-2020-26141: alfa awus036h_firmware
Vulnerability summary
CVE-2020-26141 is a medium (CVSS 6.5) vulnerability in alfa awus036h_firmware. EPSS estimates a 3.07% chance of exploitation in the next 30 days, higher than 87.6% of scored vulnerabilities.
Not severe (CVSS 6.5, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 29 · Related 25Timeline
- 11-05-2021PublishedVulnerability first disclosed.
- 14-04-2026Last modifiedVulnerability information updated.
Description
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS trend
Probability
3.07%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.07% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu52 products
- linuxAll versions (No fix recorded) | < 4.4.0-223.256 | < 5.4.0-77.86
- linux-aws< 4.4.0-1103.108 | < 4.4.0-1139.153 | All versions (No fix recorded) | < 5.4.0-1051.53
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.3All versions (No fix recorded)
- linux-aws-5.4< 5.4.0-1051.53~18.04.1
Cisco48 products
- ip_conference_phone_8832_firmware< 14.1\(1\)
- ip_phone_6861_firmware< 11.3\(5\)
- ip_phone_8861_firmware< 11.3\(5\) | < 14.1\(1\)
- ip_phone_8865_firmware< 14.1\(1\)
- meraki_gr10_firmware< 27.7.1
Siemens46 products
- 6gk5721-1fc00-0aa0_firmwarena
- 6gk5721-1fc00-0ab0_firmwarena
- 6gk5722-1fc00-0aa0_firmwarena
- 6gk5722-1fc00-0ab0_firmwarena
- 6gk5722-1fc00-0ac0_firmwarena
Alfa1 product
- awus036h_firmware6.1316.1209
Debian1 product
- linux< 5.10.46-1
5 vendors · 148 products
References
19 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuVendor AdvisoryX Refsource CISCOThird Party Advisory
- www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63X Refsource MISCThird Party Advisory
