Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2020-26143

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

SeverityMEDIUM
CVSS6.5
CWECWE-20
KEV
Published
Modified

Related Products

Product Advisory Evidence
Cisco Webex Room Phone cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln
Cisco TelePresence Endpoint Software (TC/CE) cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln
Cisco TelePresence cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln
Cisco IP phone cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln
Cisco IP Phones with Multiplatform Firmware cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln
Cisco Business Wireless Access Point Software cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln
Cisco Aironet Access Point Software (IOS XE Controller) cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln
Cisco Aironet Access Point Software cisco-sa-wifi-faf-22epcEWu Cisco OpenVuln