What’s Vulnerable › Vulnerabilities

CVE-2020-24586

• Severity: low (CVSS 3.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-05-11 · updated 2026-06-17

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

Affected products

• Arista C-200 Firmware: before 11.0.0-36 — fixed in 11.0.0-36
• Arista C-230 Firmware: before 10.0.1-31 — fixed in 10.0.1-31
• Arista C-235 Firmware: before 10.0.1-31 — fixed in 10.0.1-31
• Arista C-250 Firmware: before 10.0.1-31 — fixed in 10.0.1-31
• Arista C-260 Firmware: before 10.0.1-31 — fixed in 10.0.1-31
• Debian Linux: 9.0
• Ieee 802.11: all versions
• Intel Ac 1550 Firmware: all versions
• Intel Ac 3165 Firmware: before 19.51.33.1 — fixed in 19.51.33.1
• Intel Ac 3168 Firmware: before 19.51.33.1 — fixed in 19.51.33.1
• Intel Ac 7265 Firmware: before 19.51.33.1 — fixed in 19.51.33.1
• Intel Ac 8260 Firmware: before 20.70.21.2 — fixed in 20.70.21.2
• Intel Ac 8265 Firmware: before 20.70.21.2 — fixed in 20.70.21.2
• Intel Ac 9260 Firmware: before 22.30.0.11 — fixed in 22.30.0.11
• Intel Ac 9461 Firmware: before 22.30.0.11 — fixed in 22.30.0.11
• Intel Ac 9462 Firmware: before 22.30.0.11 — fixed in 22.30.0.11
• Intel Ac 9560 Firmware: before 22.30.0.11 — fixed in 22.30.0.11
• Intel Ax1650 Firmware: all versions
• Intel Ax1675 Firmware: all versions
• Intel Ax200 Firmware: before 22.30.0.11 — fixed in 22.30.0.11
• Intel Ax201 Firmware: before 22.30.0.11 — fixed in 22.30.0.11
• Intel Ax210 Firmware: before 22.30.0.11 — fixed in 22.30.0.11
• Linux kernel: from 4.4 before 4.4.271; from 4.9 before 4.9.271; from 4.14 before 4.14.235; from 4.19 before 4.19.193; from 5.4 before 5.4.124; from 5.10 before 5.10.42 — fixed in 4.14.235, 4.19.193, 4.4.271, 4.9.271, 5.10.42, 5.12.9
• Linux Mac80211: all versions

How to fix

Upgrade to a fixed version: Arista C-200 Firmware 11.0.0-36; Arista C-230 Firmware 10.0.1-31; Arista C-235 Firmware 10.0.1-31; Arista C-250 Firmware 10.0.1-31; Arista C-260 Firmware 10.0.1-31; Intel Ac 3165 Firmware 19.51.33.1; Intel Ac 3168 Firmware 19.51.33.1; Intel Ac 7265 Firmware 19.51.33.1; Intel Ac 8260 Firmware 20.70.21.2; Intel Ac 8265 Firmware 20.70.21.2; Intel Ac 9260 Firmware 22.30.0.11; Intel Ac 9461 Firmware 22.30.0.11. Check the vendor advisory for mitigations.

References

• http://www.openwall.com/lists/oss-security/2021/05/11/12
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
• https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
• https://www.fragattacks.com
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html
• http://www.openwall.com/lists/oss-security/2021/05/11/12
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html

Get alerted when CVE-2020-24586 or the next vulnerability affects your stack