What’s Vulnerable › Vulnerabilities

CVE-2020-26141

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-11 · updated 2026-06-17
• Weakness: CWE-354

Description

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

Affected products

• Alfa Awus036H Firmware: 6.1316.1209
• Cisco Ip Conference Phone 8832 Firmware: before 14.1\(1\) — fixed in 14.1\(1\)
• Cisco Ip Phone 6861 Firmware: before 11.3\(5\) — fixed in 11.3\(5\)
• Cisco Ip Phone 8861 Firmware: before 11.3\(5\); before 14.1\(1\) — fixed in 11.3\(5\), 14.1\(1\)
• Cisco Ip Phone 8865 Firmware: before 14.1\(1\) — fixed in 14.1\(1\)
• Cisco Meraki Gr10 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Gr60 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr12 Firmware: before 26.8.3 — fixed in 26.8.3
• Cisco Meraki Mr18 Firmware: before 26.8.3 — fixed in 26.8.3
• Cisco Meraki Mr20 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr26 Firmware: before 26.8.3 — fixed in 26.8.3
• Cisco Meraki Mr30H Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr32 Firmware: before 26.8.3 — fixed in 26.8.3
• Cisco Meraki Mr33 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr34 Firmware: before 26.8.3 — fixed in 26.8.3
• Cisco Meraki Mr36 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr42 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr42E Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr44 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr45 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr46 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr46E Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr52 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr53 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr53E Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr55 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr56 Firmware: before 27.7.1 — fixed in 27.7.1
• Cisco Meraki Mr62 Firmware: before 26.8.3 — fixed in 26.8.3
• Cisco Meraki Mr66 Firmware: before 26.8.3 — fixed in 26.8.3
• Cisco Meraki Mr70 Firmware: before 27.7.1 — fixed in 27.7.1

How to fix

Upgrade to a fixed version: Cisco Ip Conference Phone 8832 Firmware 14.1\(1\); Cisco Ip Phone 6861 Firmware 11.3\(5\); Cisco Ip Phone 8861 Firmware 11.3\(5\), 14.1\(1\); Cisco Ip Phone 8865 Firmware 14.1\(1\); Cisco Meraki Gr10 Firmware 27.7.1; Cisco Meraki Gr60 Firmware 27.7.1; Cisco Meraki Mr12 Firmware 26.8.3; Cisco Meraki Mr18 Firmware 26.8.3; Cisco Meraki Mr20 Firmware 27.7.1; Cisco Meraki Mr26 Firmware 26.8.3; Cisco Meraki Mr30H Firmware 27.7.1; Cisco Meraki Mr32 Firmware 26.8.3. Check the vendor advisory for mitigations.

References

• http://www.openwall.com/lists/oss-security/2021/05/11/12
• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
• https://www.fragattacks.com
• http://www.openwall.com/lists/oss-security/2021/05/11/12
• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
• https://www.fragattacks.com

Get alerted when CVE-2020-26141 or the next vulnerability affects your stack