CVSS 3.1
2.6 lowCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:NCVE-2020-24587
Low (2.6). EPSS 2.6% chance of exploitation in the next 30 days.
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
Severity
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-327
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arista:c-100_firmware
- arista:c-110_firmware
- arista:c-120_firmware
- arista:c-130_firmware
- arista:c-200_firmware
- arista:c-230_firmware
- arista:c-235_firmware
- arista:c-250_firmware
- arista:c-260_firmware
- arista:c-65_firmware
- arista:c-75_firmware
- arista:o-105_firmware
- arista:o-90_firmware
- arista:w-118_firmware
- arista:w-68_firmware
- cisco:1100-4p_firmware
- cisco:1100-8p_firmware
- cisco:1100_firmware
- cisco:1101-4p_firmware
- cisco:1109-2p_firmware
- cisco:1109-4p_firmware
- cisco:aironet_1532_firmware
- cisco:aironet_1542d_firmware
- cisco:aironet_1542i_firmware
- cisco:aironet_1552_firmware
- cisco:aironet_1552h_firmware
- cisco:aironet_1572_firmware
- cisco:aironet_1702_firmware
- cisco:aironet_1800_firmware
- cisco:aironet_1800i_firmware
- cisco:aironet_1810_firmware
- cisco:aironet_1810w_firmware
- cisco:aironet_1815_firmware
- cisco:aironet_1815i_firmware
- cisco:aironet_1832_firmware
- cisco:aironet_1842_firmware
- cisco:aironet_1852_firmware
- cisco:aironet_2702_firmware
- cisco:aironet_2800_firmware
- cisco:aironet_2800e_firmware
- cisco:aironet_2800i_firmware
- cisco:aironet_3702_firmware
- cisco:aironet_3800_firmware
- cisco:aironet_3800e_firmware
- cisco:aironet_3800i_firmware
- cisco:aironet_3800p_firmware
- cisco:aironet_4800_firmware
- cisco:aironet_ap803_firmware
- cisco:aironet_iw3702_firmware
- cisco:catalyst_9105_firmware
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html