CVE-2020-26141

CWE-354CWE-345CWE-772CWE-9917 documents10 sources
Severity
6.5MEDIUM
EPSS
0.3%
top 44.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
49
Cisco IP Conference Phone 8832 FirmwareCisco IP Phone 6861 FirmwareCisco IP Phone 8861 Firmware+46 more
Timeline
PublishedMay 11
Latest updateMay 24

Description

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages50 packages

▶NVDalfa/awus036h_firmware6.1316.1209

🔴Vulnerability Details

5
GHSA
GHSA-mq8v-785f-4pmx: An issue was discovered in the ALFA Windows 10 driver 6↗2022-05-24
▶
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities↗2022-04-01
▶
CVEList
CVE-2020-26141: An issue was discovered in the ALFA Windows 10 driver 6↗2021-05-11
▶
Kernel
ath10k: Fix TKIP Michael MIC verification for PCIe↗2021-05-11
▶
OSV
CVE-2020-26141: An issue was discovered in the ALFA Windows 10 driver 6↗2021-05-11
▶

📋Vendor Advisories

11
Ubuntu
Linux kernel vulnerabilities↗2022-04-01
▶
Android
CVE-2020-26141: WLAN↗2021-10-01
▶
Ubuntu
Linux kernel (KVM) vulnerabilities↗2021-06-25
▶
Ubuntu
Linux kernel (KVM) vulnerabilities↗2021-06-25
▶
Ubuntu
Linux kernel vulnerabilities↗2021-06-23
▶