CVE-2020-26140

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

CVSS 3.1

6.5CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-25)

CWE

CWE-327

Published

2021-05-11

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• alfa:awus036h_firmware
• arista:c-100_firmware
• arista:c-110_firmware
• arista:c-120_firmware
• arista:c-130_firmware
• arista:c-200_firmware
• arista:c-230_firmware
• arista:c-235_firmware
• arista:c-250_firmware
• arista:c-260_firmware
• arista:c-65_firmware
• arista:c-75_firmware
• arista:o-105_firmware
• arista:o-90_firmware
• arista:w-118_firmware
• arista:w-68_firmware
• cisco:1100-4p_firmware
• cisco:1100-8p_firmware
• cisco:1100_firmware
• cisco:1101-4p_firmware
• cisco:1109-2p_firmware
• cisco:1109-4p_firmware
• cisco:aironet_1532_firmware
• cisco:aironet_1542d_firmware
• cisco:aironet_1542i_firmware
• cisco:aironet_1552_firmware
• cisco:aironet_1552h_firmware
• cisco:aironet_1560_firmware
• cisco:aironet_1562d_firmware
• cisco:aironet_1562e_firmware
• cisco:aironet_1562i_firmware
• cisco:aironet_1572_firmware
• cisco:aironet_1702_firmware
• cisco:aironet_1800_firmware
• cisco:aironet_1800i_firmware
• cisco:aironet_1810_firmware
• cisco:aironet_1810w_firmware
• cisco:aironet_1815_firmware
• cisco:aironet_1815i_firmware
• cisco:aironet_1832_firmware
• cisco:aironet_1842_firmware
• cisco:aironet_1852_firmware
• cisco:aironet_2702_firmware
• cisco:aironet_2800_firmware
• cisco:aironet_2800e_firmware
• cisco:aironet_2800i_firmware
• cisco:aironet_3702_firmware
• cisco:aironet_3800_firmware
• cisco:aironet_3800e_firmware
• cisco:aironet_3800i_firmware

References

• http://www.openwall.com/lists/oss-security/2021/05/11/12
• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

Check your stackJSON