What’s Vulnerable › Vulnerabilities
CVE-2020-26139
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 6.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-05-11 · updated 2026-06-17
- Weakness: CWE-287
Description
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.
Affected products
- Arista C-100 Firmware: all versions
- Arista C-110 Firmware: all versions
- Arista C-120 Firmware: all versions
- Arista C-130 Firmware: all versions
- Arista C-200 Firmware: all versions
- Arista C-230 Firmware: all versions
- Arista C-235 Firmware: all versions
- Arista C-250 Firmware: all versions
- Arista C-260 Firmware: all versions
- Arista C-65 Firmware: all versions
- Arista C-75 Firmware: all versions
- Arista O-105 Firmware: all versions
- Arista O-90 Firmware: all versions
- Arista W-118 Firmware: all versions
- Arista W-68 Firmware: all versions
- Cisco 1100-4P Firmware: all versions
- Cisco 1100-8P Firmware: all versions
- Cisco 1100 Firmware: all versions
- Cisco 1101-4P Firmware: all versions
- Cisco 1109-2P Firmware: all versions
- Cisco 1109-4P Firmware: all versions
- Cisco Aironet 1532 Firmware: all versions
- Cisco Aironet 1542D Firmware: all versions
- Cisco Aironet 1542I Firmware: all versions
- Cisco Aironet 1552 Firmware: all versions
- Cisco Aironet 1552H Firmware: all versions
- Cisco Aironet 1572 Firmware: all versions
- Cisco Aironet 1702 Firmware: all versions
- Cisco Aironet 1800 Firmware: all versions
- Cisco Aironet 1800I Firmware: all versions
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
- https://www.fragattacks.com
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Get alerted when CVE-2020-26139 or the next vulnerability affects your stack