What’s Vulnerable › Vulnerabilities
CVE-2020-24587
- Severity: low (CVSS 2.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2021-05-11 · updated 2026-06-17
- Weakness: CWE-327
Description
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
Affected products
- Arista C-100 Firmware: all versions
- Arista C-110 Firmware: all versions
- Arista C-120 Firmware: all versions
- Arista C-130 Firmware: all versions
- Arista C-200 Firmware: all versions
- Arista C-230 Firmware: all versions
- Arista C-235 Firmware: all versions
- Arista C-250 Firmware: all versions
- Arista C-260 Firmware: all versions
- Arista C-65 Firmware: all versions
- Arista C-75 Firmware: all versions
- Arista O-105 Firmware: all versions
- Arista O-90 Firmware: all versions
- Arista W-118 Firmware: all versions
- Arista W-68 Firmware: all versions
- Cisco 1100-4P Firmware: all versions
- Cisco 1100-8P Firmware: all versions
- Cisco 1100 Firmware: all versions
- Cisco 1101-4P Firmware: all versions
- Cisco 1109-2P Firmware: all versions
- Cisco 1109-4P Firmware: all versions
- Cisco Aironet 1532 Firmware: all versions
- Cisco Aironet 1542D Firmware: all versions
- Cisco Aironet 1542I Firmware: all versions
- Cisco Aironet 1552 Firmware: all versions
- Cisco Aironet 1552H Firmware: all versions
- Cisco Aironet 1572 Firmware: all versions
- Cisco Aironet 1702 Firmware: all versions
- Cisco Aironet 1800 Firmware: all versions
- Cisco Aironet 1800I Firmware: all versions
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
- https://www.fragattacks.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Get alerted when CVE-2020-24587 or the next vulnerability affects your stack