MEDIUM✓ PATCH🇬🇧 English

CVE-2020-26141

CVSS 6.5v3.1pub. 2021-05-11upd. 2026-04-14

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Alfa Awus036h

    HW
    Alfa
    wszystkie wersje

  • Alfa Awus036h Firmware

    OS
    Alfa
    6.1316.1209

  • Cisco Ip Conference Phone 8832

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Conference Phone 8832 Firmware

    OS
    Cisco
    < 14.1\(1\)

  • Cisco Ip Phone 6861

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 6861 Firmware

    OS
    Cisco
    < 11.3\(5\)

  • Cisco Ip Phone 8861

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 8861 Firmware

    OS
    Cisco
    < 11.3\(5\)< 14.1\(1\)

  • Cisco Ip Phone 8865

    HW
    Cisco
    wszystkie wersje

  • Cisco Ip Phone 8865 Firmware

    OS
    Cisco
    < 14.1\(1\)

  • Cisco Meraki Gr10

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Gr10 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Gr60

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Gr60 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr12

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr12 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr18

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr18 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr20

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr20 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr26

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr26 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr30h

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr30h Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr32

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr32 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr33

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr33 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr34

    HW
    Cisco
    wszystkie wersje

  • Cisco Meraki Mr34 Firmware

    OS
    Cisco
    < 26.8.3
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2020-3161CRITICAL9.8⚠ KEVten sam produkt

A vulnerability in the web server for Cisco IP Phones could allow an unauthenticated, remote attacker to execu...

CVE-2023-20079CRITICAL9.8ten sam produkt

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unaut...

CVE-2023-20078CRITICAL9.8ten sam produkt

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unaut...

CVE-2025-20350HIGH7.5ten sam produkt

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco ...

CVE-2024-20498HIGH8.6ten sam produkt

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Telew...