Back to Database
Status published
Medium
CVE-2020-26139
An issue was discovered in the kernel in NetBSD 7.1....
Vulnerability Description
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26139
Credits & Attribution
No credits recorded in the NVD database.
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
- https://www.fragattacks.com
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
- http://www.openwall.com/lists/oss-security/2021/05/11/12
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
More from netbsd
View All →CVE-2021-45489
In NetBSD through 9.2, the IPv6 Flow Label generation algorithm...
High
7.5
CVE-2021-45488
In NetBSD through 9.2, there is an information leak in...
High
7.5
CVE-2021-45487
In NetBSD through 9.2, the IPv4 ID generation algorithm does...
High
7.5
CVE-2021-45484
In NetBSD through 9.2, the IPv6 fragment ID generation algorithm...
High
7.5
CVE-2017-1000378
The NetBSD qsort() function is recursive, and not randomized, an...
Critical
9.8
Affected Vendor
netbsd
View all reports →Affected Software
netbsd, debian linux, c-100 firmware, c-110 firmware, c-120 firmware, c-130 firmware, c-200 firmware, c-230 firmware, c-235 firmware, c-250 firmware, c-260 firmware, c-65 firmware, c-75 firmware, o-105 firmware, o-90 firmware, w-118 firmware, w-68 firmware, 1100 firmware, 1100-4p firmware, 1100-8p firmware, 1101-4p firmware, 1109-2p firmware, 1109-4p firmware, aironet 1532 firmware, aironet 1542d firmware, aironet 1542i firmware, aironet 1552 firmware, aironet 1552h firmware, aironet 1572 firmware, aironet 1702 firmware, aironet 1800 firmware, aironet 1800i firmware, aironet 1810 firmware, aironet 1810w firmware, aironet 1815 firmware, aironet 1815i firmware, aironet 1832 firmware, aironet 1842 firmware, aironet 1852 firmware, aironet 2702 firmware, aironet 2800 firmware, aironet 2800e firmware, aironet 2800i firmware, aironet 3702 firmware, aironet 3800 firmware, aironet 3800e firmware, aironet 3800i firmware, aironet 3800p firmware, aironet 4800 firmware, aironet ap803 firmware, aironet iw3702 firmware, catalyst 9105 firmware, catalyst 9105axi firmware, catalyst 9105axw firmware, catalyst 9115 firmware, catalyst 9115 ap firmware, catalyst 9115axe firmware, catalyst 9115axi firmware, catalyst 9117 firmware, catalyst 9117 ap firmware, catalyst 9117axi firmware, catalyst 9120 firmware, catalyst 9120 ap firmware, catalyst 9120axe firmware, catalyst 9120axi firmware, catalyst 9120axp firmware, catalyst 9124 firmware, catalyst 9124axd firmware, catalyst 9124axi firmware, catalyst 9130 firmware, catalyst 9130 ap firmware, catalyst 9130axe firmware, catalyst 9130axi firmware, catalyst iw6300 firmware, catalyst iw6300 ac firmware, catalyst iw6300 dc firmware, catalyst iw6300 dcw firmware, esw6300 firmware, ip phone 6861 firmware, ip phone 8821 firmware, ip phone 8832 firmware, ip phone 8861 firmware, ip phone 8865 firmware, ir829-2lte-ea-ak9 firmware, ir829-2lte-ea-bk9 firmware, ir829-2lte-ea-ek9 firmware, ir829gw-lte-ga-ck9 firmware, ir829gw-lte-ga-ek9 firmware, ir829gw-lte-ga-sk9 firmware, ir829gw-lte-ga-zk9 firmware, ir829gw-lte-na-ak9 firmware, ir829gw-lte-vz-ak9 firmware, meraki gr10 firmware, meraki gr60 firmware, meraki mr12 firmware, meraki mr20 firmware, meraki mr26 firmware, meraki mr30h firmware, meraki mr32 firmware, meraki mr33 firmware, meraki mr34 firmware, meraki mr36 firmware, meraki mr42 firmware, meraki mr42e firmware, meraki mr44 firmware, meraki mr45 firmware, meraki mr46 firmware, meraki mr46e firmware, meraki mr52 firmware, meraki mr53 firmware, meraki mr53e firmware, meraki mr55 firmware, meraki mr56 firmware, meraki mr62 firmware, meraki mr66 firmware, meraki mr70 firmware, meraki mr72 firmware, meraki mr74 firmware, meraki mr76 firmware, meraki mr84 firmware, meraki mr86 firmware, meraki mx64w firmware, meraki mx65w firmware, meraki mx67cw firmware, meraki mx67w firmware, meraki mx68cw firmware, meraki mx68w firmware, meraki z3 firmware, meraki z3c firmware, webex board 55 firmware, webex board 55s firmware, webex board 70 firmware, webex board 70s firmware, webex board 85s firmware, webex dx70 firmware, webex dx80 firmware, webex room 55 firmware, webex room 55 dual firmware, webex room 70 firmware, webex room 70 dual firmware, webex room 70 dual g2 firmware, webex room 70 single firmware, webex room 70 single g2 firmware, webex room kit firmware, webex room kit mini firmware, ac 8260 firmware, ac 8265 firmware, ac 9260 firmware, ac 9560 firmware, killer ac 1550 firmware, killer wi-fi 6 ax1650 firmware, killer wi-fi 6e ax1675 firmware, proset ac 3165 firmware, proset ac 3168 firmware, proset ac 8260 firmware, proset ac 8265 firmware, proset ac 9260 firmware, proset ac 9461 firmware, proset ac 9462 firmware, proset ac 9560 firmware, proset wi-fi 6 ax200 firmware, proset wi-fi 6 ax201 firmware, proset wi-fi 6e ax210 firmware, proset wireless 7265 \(rev d\) firmware, wi-fi 6 ax200 firmware, wi-fi 6 ax201 firmware
Vulnerable Versions:
7.1, 9.0
Timeline
Official Publish:
May 11th, 2021
Last Modified:
April 14th, 2026
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.