imPC@ndo IT

Tracker / CVE-2020-26140

CVE-2020-26140

Medium 6.5

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

Affected products and versions

alfa awus036h_firmware
arista c-100_firmware
arista c-110_firmware
arista c-120_firmware
arista c-130_firmware
arista c-200_firmware
arista c-230_firmware
arista c-235_firmware
arista c-250_firmware
arista c-260_firmware
arista c-65_firmware
arista c-75_firmware
arista o-105_firmware
arista o-90_firmware
arista w-118_firmware
arista w-68_firmware
cisco 1100-4p_firmware
cisco 1100-8p_firmware
cisco 1100_firmware
cisco 1101-4p_firmware
cisco 1109-2p_firmware
cisco 1109-4p_firmware
cisco aironet_1532_firmware
cisco aironet_1542d_firmware
cisco aironet_1542i_firmware
cisco aironet_1552_firmware
cisco aironet_1552h_firmware
cisco aironet_1560_firmware
cisco aironet_1562d_firmware
cisco aironet_1562e_firmware
cisco aironet_1562i_firmware
cisco aironet_1572_firmware
cisco aironet_1702_firmware
cisco aironet_1800_firmware
cisco aironet_1800i_firmware
cisco aironet_1810_firmware
cisco aironet_1810w_firmware
cisco aironet_1815_firmware
cisco aironet_1815i_firmware
cisco aironet_1832_firmware
cisco aironet_1842_firmware
cisco aironet_1852_firmware
cisco aironet_2702_firmware
cisco aironet_2800_firmware
cisco aironet_2800e_firmware
cisco aironet_2800i_firmware
cisco aironet_3702_firmware
cisco aironet_3800_firmware
cisco aironet_3800e_firmware
cisco aironet_3800i_firmware
cisco aironet_3800p_firmware
cisco aironet_4800_firmware
cisco aironet_ap803_firmware
cisco aironet_iw3702_firmware
cisco catalyst_9105_firmware
cisco catalyst_9105axi_firmware
cisco catalyst_9105axw_firmware
cisco catalyst_9115_ap_firmware
cisco catalyst_9115_firmware
cisco catalyst_9115axe_firmware

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References