Tracker / CVE-2020-24588
CVE-2020-24588
Low 3.5
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
Affected products and versions
| arista | c-100_firmware |
|---|---|
| arista | c-110_firmware |
| arista | c-120_firmware |
| arista | c-130_firmware |
| arista | c-200_firmware |
| arista | c-230_firmware |
| arista | c-235_firmware |
| arista | c-250_firmware |
| arista | c-260_firmware |
| arista | c-65_firmware |
| arista | c-75_firmware |
| arista | o-105_firmware |
| arista | o-90_firmware |
| arista | w-118_firmware |
| arista | w-68_firmware |
| cisco | 1100-4p_firmware |
| cisco | 1100-8p_firmware |
| cisco | 1100_firmware |
| cisco | 1101-4p_firmware |
| cisco | 1109-2p_firmware |
| cisco | 1109-4p_firmware |
| cisco | aironet_1532_firmware |
| cisco | aironet_1542d_firmware |
| cisco | aironet_1542i_firmware |
| cisco | aironet_1800_firmware |
| cisco | aironet_1800i_firmware |
| cisco | aironet_1810_firmware |
| cisco | aironet_1810w_firmware |
| cisco | aironet_1815_firmware |
| cisco | aironet_1815i_firmware |
| cisco | aironet_1832_firmware |
| cisco | aironet_1842_firmware |
| cisco | aironet_1852_firmware |
| cisco | aironet_ap803_firmware |
| cisco | aironet_iw3702_firmware |
| cisco | catalyst_9105_firmware |
| cisco | catalyst_9105axi_firmware |
| cisco | catalyst_9105axw_firmware |
| cisco | catalyst_9115_ap_firmware |
| cisco | catalyst_9115_firmware |
| cisco | catalyst_9115axe_firmware |
| cisco | catalyst_9115axi_firmware |
| cisco | catalyst_9117_ap_firmware |
| cisco | catalyst_9117_firmware |
| cisco | catalyst_9117axi_firmware |
| cisco | catalyst_9120_ap_firmware |
| cisco | catalyst_9120_firmware |
| cisco | catalyst_9120axe_firmware |
| cisco | catalyst_9120axi_firmware |
| cisco | catalyst_9120axp_firmware |
| cisco | catalyst_9124_firmware |
| cisco | catalyst_9124axd_firmware |
| cisco | catalyst_9124axi_firmware |
| cisco | catalyst_9130_ap_firmware |
| cisco | catalyst_9130_firmware |
| cisco | catalyst_9130axe_firmware |
| cisco | catalyst_9130axi_firmware |
| cisco | ip_phone_6861_firmware |
| cisco | ip_phone_8821_firmware |
| cisco | ip_phone_8832_firmware |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.