60
CVE-2020-24587
- CVSS 3.1
- 2.6 low
- EPSS
- 3%p85
- Published
- ·
- Modified
Description · NVD
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
- Products
- ieee 802.11, mac80211, debian linux, c-100 firmware, c-110 firmware, c-120 firmware, c-130 firmware, c-200 firmware, c-230 firmware, c-235 firmware, c-250 firmware, c-260 firmware
- Weakness
- CWE-327
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
In the news
6 storiesMicrosoft Patch Tuesday for May 2021 fix 4 critical flaws
60
60
35
35
35