What’s Vulnerable › Vulnerabilities
CVE-2020-24588
- Severity: low (CVSS 3.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2021-05-11 · updated 2026-06-17
- Weakness: CWE-327
Description
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
Affected products
- Arista C-100 Firmware: all versions
- Arista C-110 Firmware: all versions
- Arista C-120 Firmware: all versions
- Arista C-130 Firmware: all versions
- Arista C-200 Firmware: all versions
- Arista C-230 Firmware: all versions
- Arista C-235 Firmware: all versions
- Arista C-250 Firmware: all versions
- Arista C-260 Firmware: all versions
- Arista C-65 Firmware: all versions
- Arista C-75 Firmware: all versions
- Arista O-105 Firmware: all versions
- Arista O-90 Firmware: all versions
- Arista W-118 Firmware: all versions
- Arista W-68 Firmware: all versions
- Cisco 1100-4P Firmware: all versions
- Cisco 1100-8P Firmware: all versions
- Cisco 1100 Firmware: all versions
- Cisco 1101-4P Firmware: all versions
- Cisco 1109-2P Firmware: all versions
- Cisco 1109-4P Firmware: all versions
- Cisco Aironet 1532 Firmware: all versions
- Cisco Aironet 1542D Firmware: all versions
- Cisco Aironet 1542I Firmware: all versions
- Cisco Aironet 1800 Firmware: all versions
- Cisco Aironet 1800I Firmware: all versions
- Cisco Aironet 1810 Firmware: all versions
- Cisco Aironet 1810W Firmware: all versions
- Cisco Aironet 1815 Firmware: all versions
- Cisco Aironet 1815I Firmware: all versions
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
- https://www.fragattacks.com
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
Get alerted when CVE-2020-24588 or the next vulnerability affects your stack