ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-24587

PoC —
CVSS 3.1
2.6 low
EPSS
3%p84
Published
()
Modified
Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

Vendors
ieeelinuxdebianaristaciscointel
Products
ieee 802.11, mac80211, debian linux, c-100 firmware, c-110 firmware, c-120 firmware, c-130 firmware, c-200 firmware, c-230 firmware, c-235 firmware, c-250 firmware, c-260 firmware
Weakness
CWE-327
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news