Back to Database
Status published
Low
CVE-2020-24587
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2,...
Vulnerability Description
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-24587
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
- https://www.fragattacks.com
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
- https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
More from ieee
View All →CVE-2022-47522
The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers...
Unknown
0
CVE-2020-24588
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2,...
Low
3.5
CVE-2020-24586
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2,...
Low
3.5
CVE-2004-1038
A design error in the IEEE1394 specification allows attackers with...
High
7.2
CVE-2004-0459
The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11...
Medium
5
Affected Vendor
ieee
View all reports →Affected Software
ieee 802.11, mac80211, debian linux, c-100 firmware, c-110 firmware, c-120 firmware, c-130 firmware, c-200 firmware, c-230 firmware, c-235 firmware, c-250 firmware, c-260 firmware, c-65 firmware, c-75 firmware, o-105 firmware, o-90 firmware, w-118 firmware, w-68 firmware, 1100 firmware, 1100-4p firmware, 1100-8p firmware, 1101-4p firmware, 1109-2p firmware, 1109-4p firmware, aironet 1532 firmware, aironet 1542d firmware, aironet 1542i firmware, aironet 1552 firmware, aironet 1552h firmware, aironet 1572 firmware, aironet 1702 firmware, aironet 1800 firmware, aironet 1800i firmware, aironet 1810 firmware, aironet 1810w firmware, aironet 1815 firmware, aironet 1815i firmware, aironet 1832 firmware, aironet 1842 firmware, aironet 1852 firmware, aironet 2702 firmware, aironet 2800 firmware, aironet 2800e firmware, aironet 2800i firmware, aironet 3702 firmware, aironet 3800 firmware, aironet 3800e firmware, aironet 3800i firmware, aironet 3800p firmware, aironet 4800 firmware, aironet ap803 firmware, aironet iw3702 firmware, catalyst 9105 firmware, catalyst 9105axi firmware, catalyst 9105axw firmware, catalyst 9115 firmware, catalyst 9115 ap firmware, catalyst 9115axe firmware, catalyst 9115axi firmware, catalyst 9117 firmware, catalyst 9117 ap firmware, catalyst 9117axi firmware, catalyst 9120 firmware, catalyst 9120 ap firmware, catalyst 9120axe firmware, catalyst 9120axi firmware, catalyst 9120axp firmware, catalyst 9124 firmware, catalyst 9124axd firmware, catalyst 9124axi firmware, catalyst 9130 firmware, catalyst 9130 ap firmware, catalyst 9130axe firmware, catalyst 9130axi firmware, catalyst iw6300 firmware, catalyst iw6300 ac firmware, catalyst iw6300 dc firmware, catalyst iw6300 dcw firmware, esw6300 firmware, ip phone 6861 firmware, ip phone 8821 firmware, ip phone 8832 firmware, ip phone 8861 firmware, ip phone 8865 firmware, ir829-2lte-ea-ak9 firmware, ir829-2lte-ea-bk9 firmware, ir829-2lte-ea-ek9 firmware, ir829gw-lte-ga-ck9 firmware, ir829gw-lte-ga-ek9 firmware, ir829gw-lte-ga-sk9 firmware, ir829gw-lte-ga-zk9 firmware, ir829gw-lte-na-ak9 firmware, ir829gw-lte-vz-ak9 firmware, meraki gr10 firmware, meraki gr60 firmware, meraki mr12 firmware, meraki mr20 firmware, meraki mr26 firmware, meraki mr30h firmware, meraki mr32 firmware, meraki mr33 firmware, meraki mr34 firmware, meraki mr36 firmware, meraki mr42 firmware, meraki mr42e firmware, meraki mr44 firmware, meraki mr45 firmware, meraki mr46 firmware, meraki mr46e firmware, meraki mr52 firmware, meraki mr53 firmware, meraki mr53e firmware, meraki mr55 firmware, meraki mr56 firmware, meraki mr62 firmware, meraki mr66 firmware, meraki mr70 firmware, meraki mr72 firmware, meraki mr74 firmware, meraki mr76 firmware, meraki mr84 firmware, meraki mr86 firmware, meraki mx64w firmware, meraki mx65w firmware, meraki mx67cw firmware, meraki mx67w firmware, meraki mx68cw firmware, meraki mx68w firmware, meraki z3 firmware, meraki z3c firmware, webex board 55 firmware, webex board 55s firmware, webex board 70 firmware, webex board 70s firmware, webex board 85s firmware, webex dx70 firmware, webex dx80 firmware, webex room 55 firmware, webex room 55 dual firmware, webex room 70 firmware, webex room 70 dual firmware, webex room 70 dual g2 firmware, webex room 70 single firmware, webex room 70 single g2 firmware, webex room kit firmware, webex room kit mini firmware, ac 8260 firmware, ac 8265 firmware, ac 9260 firmware, ac 9560 firmware, killer ac 1550 firmware, killer wi-fi 6 ax1650 firmware, killer wi-fi 6e ax1675 firmware, proset ac 3165 firmware, proset ac 3168 firmware, proset ac 8260 firmware, proset ac 8265 firmware, proset ac 9260 firmware, proset ac 9461 firmware, proset ac 9462 firmware, proset ac 9560 firmware, proset wi-fi 6 ax200 firmware, proset wi-fi 6 ax201 firmware, proset wi-fi 6e ax210 firmware, proset wireless 7265 \(rev d\) firmware, wi-fi 6 ax200 firmware, wi-fi 6 ax201 firmware, linux kernel
Vulnerable Versions:
9.0, 4.4, 4.9, 4.14, 4.19, 5.4, 5.10, 5.12
Timeline
Official Publish:
May 11th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.