imPC@ndo IT

Tracker / CVE-2020-26139

CVE-2020-26139

Medium 5.3

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Affected products and versions

arista c-100_firmware
arista c-110_firmware
arista c-120_firmware
arista c-130_firmware
arista c-200_firmware
arista c-230_firmware
arista c-235_firmware
arista c-250_firmware
arista c-260_firmware
arista c-65_firmware
arista c-75_firmware
arista o-105_firmware
arista o-90_firmware
arista w-118_firmware
arista w-68_firmware
cisco 1100-4p_firmware
cisco 1100-8p_firmware
cisco 1100_firmware
cisco 1101-4p_firmware
cisco 1109-2p_firmware
cisco 1109-4p_firmware
cisco aironet_1532_firmware
cisco aironet_1542d_firmware
cisco aironet_1542i_firmware
cisco aironet_1552_firmware
cisco aironet_1552h_firmware
cisco aironet_1572_firmware
cisco aironet_1702_firmware
cisco aironet_1800_firmware
cisco aironet_1800i_firmware
cisco aironet_1810_firmware
cisco aironet_1810w_firmware
cisco aironet_1815_firmware
cisco aironet_1815i_firmware
cisco aironet_1832_firmware
cisco aironet_1842_firmware
cisco aironet_1852_firmware
cisco aironet_2702_firmware
cisco aironet_2800_firmware
cisco aironet_2800e_firmware
cisco aironet_2800i_firmware
cisco aironet_3702_firmware
cisco aironet_3800_firmware
cisco aironet_3800e_firmware
cisco aironet_3800i_firmware
cisco aironet_3800p_firmware
cisco aironet_4800_firmware
cisco aironet_ap803_firmware
cisco aironet_iw3702_firmware
cisco catalyst_9105_firmware
cisco catalyst_9105axi_firmware
cisco catalyst_9105axw_firmware
cisco catalyst_9115_ap_firmware
cisco catalyst_9115_firmware
cisco catalyst_9115axe_firmware
cisco catalyst_9115axi_firmware
cisco catalyst_9117_ap_firmware
cisco catalyst_9117_firmware
cisco catalyst_9117axi_firmware
cisco catalyst_9120_ap_firmware

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References