6.5
MEDIUM
CVE-2020-26141
ALFA AWUS036H Wi-Fi TKIP Frame Authentication Bypass Vulnerability
Description

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

INFO

Published Date :

May 11, 2021, 8:15 p.m.

Last Modified :

Nov. 21, 2024, 5:19 a.m.

Source :

[email protected]

Remotely Exploitable :

No

Impact Score :

3.6

Exploitability Score :

2.8
Public PoC/Exploit Available at Github

CVE-2020-26141 has a 1 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2020-26141 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Cisco ip_conference_phone_8832_firmware
2 Cisco ip_phone_8861_firmware
3 Cisco ip_phone_8865_firmware
4 Cisco wireless_ip_phone_8821_firmware
5 Cisco ip_phone_6861_firmware
6 Cisco meraki_mx64w_firmware
7 Cisco meraki_mx67w_firmware
8 Cisco meraki_mx68cw_firmware
9 Cisco meraki_mx68w_firmware
10 Cisco meraki_gr10_firmware
11 Cisco meraki_gr60_firmware
12 Cisco meraki_mr12_firmware
13 Cisco meraki_mr20_firmware
14 Cisco meraki_mr26_firmware
15 Cisco meraki_mr30h_firmware
16 Cisco meraki_mr32_firmware
17 Cisco meraki_mr33_firmware
18 Cisco meraki_mr34_firmware
19 Cisco meraki_mr36_firmware
20 Cisco meraki_mr42_firmware
21 Cisco meraki_mr42e_firmware
22 Cisco meraki_mr44_firmware
23 Cisco meraki_mr45_firmware
24 Cisco meraki_mr46_firmware
25 Cisco meraki_mr46e_firmware
26 Cisco meraki_mr52_firmware
27 Cisco meraki_mr53_firmware
28 Cisco meraki_mr53e_firmware
29 Cisco meraki_mr55_firmware
30 Cisco meraki_mr56_firmware
31 Cisco meraki_mr62_firmware
32 Cisco meraki_mr66_firmware
33 Cisco meraki_mr70_firmware
34 Cisco meraki_mr72_firmware
35 Cisco meraki_mr74_firmware
36 Cisco meraki_mr76_firmware
37 Cisco meraki_mr84_firmware
38 Cisco meraki_mr86_firmware
39 Cisco meraki_mx65w_firmware
40 Cisco meraki_mx67cw_firmware
41 Cisco meraki_z3_firmware
42 Cisco meraki_z3c_firmware
43 Cisco meraki_mr18_firmware
44 Cisco webex_room_series_firmware
45 Cisco webex_desk_series_firmware
46 Cisco webex_board_series_firmware
47 Cisco webex_wireless_phone_860_firmware
48 Cisco webex_wireless_phone_840_firmware
49 Cisco meraki_z3c
50 Cisco meraki_z3
51 Cisco meraki_mx68w
52 Cisco meraki_mx68cw
53 Cisco meraki_mx67w
54 Cisco meraki_mx65w
55 Cisco meraki_mx64w
56 Cisco ip_phone_8861
57 Cisco ip_phone_8865
58 Cisco ip_conference_phone_8832
59 Cisco wireless_ip_phone_8821
60 Cisco ip_phone_6861
61 Cisco meraki_gr10
62 Cisco meraki_gr60
63 Cisco meraki_mr12
64 Cisco meraki_mr20
65 Cisco meraki_mr26
66 Cisco meraki_mr30h
67 Cisco meraki_mr32
68 Cisco meraki_mr33
69 Cisco meraki_mr34
70 Cisco meraki_mr36
71 Cisco meraki_mr42
72 Cisco meraki_mr42e
73 Cisco meraki_mr44
74 Cisco meraki_mr45
75 Cisco meraki_mr46
76 Cisco meraki_mr46e
77 Cisco meraki_mr52
78 Cisco meraki_mr53
79 Cisco meraki_mr53e
80 Cisco meraki_mr55
81 Cisco meraki_mr56
82 Cisco meraki_mr62
83 Cisco meraki_mr66
84 Cisco meraki_mr70
85 Cisco meraki_mr72
86 Cisco meraki_mr74
87 Cisco meraki_mr76
88 Cisco meraki_mr84
89 Cisco meraki_mr86
90 Cisco meraki_mx67cw
91 Cisco meraki_mr18
92 Cisco webex_room_series
93 Cisco webex_desk_series
94 Cisco webex_board_series
95 Cisco webex_wireless_phone_860
96 Cisco webex_wireless_phone_840
1 Siemens 6gk5778-1gy00-0ab0_firmware
2 Siemens 6gk5778-1gy00-0aa0_firmware
3 Siemens 6gk5721-1fc00-0aa0_firmware
4 Siemens 6gk5721-1fc00-0ab0_firmware
5 Siemens 6gk5722-1fc00-0aa0_firmware
6 Siemens 6gk5722-1fc00-0ab0_firmware
7 Siemens 6gk5722-1fc00-0ac0_firmware
8 Siemens 6gk5734-1fx00-0aa0_firmware
9 Siemens 6gk5734-1fx00-0aa6_firmware
10 Siemens 6gk5734-1fx00-0ab0_firmware
11 Siemens 6gk5734-1fx00-0ab6_firmware
12 Siemens 6gk5738-1gy00-0aa0_firmware
13 Siemens 6gk5738-1gy00-0ab0_firmware
14 Siemens 6gk5748-1fc00-0aa0_firmware
15 Siemens 6gk5748-1fc00-0ab0_firmware
16 Siemens 6gk5748-1gd00-0aa0_firmware
17 Siemens 6gk5748-1gd00-0ab0_firmware
18 Siemens 6gk5761-1fc00-0aa0_firmware
19 Siemens 6gk5761-1fc00-0ab0_firmware
20 Siemens 6gk5774-1fx00-0aa0_firmware
21 Siemens 6gk5774-1fx00-0aa6_firmware
22 Siemens 6gk5774-1fx00-0ab0_firmware
23 Siemens 6gk5774-1fx00-0ab6_firmware
24 Siemens 6gk5774-1fy00-0ta0_firmware
25 Siemens 6gk5774-1fy00-0tb0_firmware
26 Siemens 6gk5778-1gy00-0ta0_firmware
27 Siemens 6gk5778-1gy00-0tb0_firmware
28 Siemens 6gk5786-1fc00-0aa0_firmware
29 Siemens 6gk5786-1fc00-0ab0_firmware
30 Siemens 6gk5786-2fc00-0aa0_firmware
31 Siemens 6gk5786-2fc00-0ab0_firmware
32 Siemens 6gk5786-2fc00-0ac0_firmware
33 Siemens 6gk5786-2hc00-0aa0_firmware
34 Siemens 6gk5786-2hc00-0ab0_firmware
35 Siemens 6gk5788-1fc00-0aa0_firmware
36 Siemens 6gk5788-1fc00-0ab0_firmware
37 Siemens 6gk5788-1gd00-0aa0_firmware
38 Siemens 6gk5788-1gd00-0ab0_firmware
39 Siemens 6gk5788-2fc00-0aa0_firmware
40 Siemens 6gk5788-2fc00-0ab0_firmware
41 Siemens 6gk5788-2fc00-0ac0_firmware
42 Siemens 6gk5788-2gd00-0aa0_firmware
43 Siemens 6gk5788-2gd00-0ab0_firmware
44 Siemens 6gk5788-2gd00-0ta0_firmware
45 Siemens 6gk5788-2gd00-0tb0_firmware
46 Siemens 6gk5788-2gd00-0tc0_firmware
47 Siemens 6gk5778-1gy00-0ab0
48 Siemens 6gk5778-1gy00-0aa0
49 Siemens 6gk5721-1fc00-0aa0
50 Siemens 6gk5721-1fc00-0ab0
51 Siemens 6gk5722-1fc00-0aa0
52 Siemens 6gk5722-1fc00-0ab0
53 Siemens 6gk5722-1fc00-0ac0
54 Siemens 6gk5734-1fx00-0aa0
55 Siemens 6gk5734-1fx00-0aa6
56 Siemens 6gk5734-1fx00-0ab0
57 Siemens 6gk5734-1fx00-0ab6
58 Siemens 6gk5738-1gy00-0aa0
59 Siemens 6gk5738-1gy00-0ab0
60 Siemens 6gk5748-1fc00-0aa0
61 Siemens 6gk5748-1fc00-0ab0
62 Siemens 6gk5748-1gd00-0aa0
63 Siemens 6gk5748-1gd00-0ab0
64 Siemens 6gk5761-1fc00-0aa0
65 Siemens 6gk5761-1fc00-0ab0
66 Siemens 6gk5774-1fx00-0aa0
67 Siemens 6gk5774-1fx00-0aa6
68 Siemens 6gk5774-1fx00-0ab0
69 Siemens 6gk5774-1fx00-0ab6
70 Siemens 6gk5774-1fy00-0ta0
71 Siemens 6gk5774-1fy00-0tb0
72 Siemens 6gk5778-1gy00-0ta0
73 Siemens 6gk5778-1gy00-0tb0
74 Siemens 6gk5786-1fc00-0aa0
75 Siemens 6gk5786-1fc00-0ab0
76 Siemens 6gk5786-2fc00-0aa0
77 Siemens 6gk5786-2fc00-0ab0
78 Siemens 6gk5786-2fc00-0ac0
79 Siemens 6gk5786-2hc00-0aa0
80 Siemens 6gk5786-2hc00-0ab0
81 Siemens 6gk5788-1fc00-0aa0
82 Siemens 6gk5788-1fc00-0ab0
83 Siemens 6gk5788-1gd00-0aa0
84 Siemens 6gk5788-1gd00-0ab0
85 Siemens 6gk5788-2fc00-0aa0
86 Siemens 6gk5788-2fc00-0ab0
87 Siemens 6gk5788-2fc00-0ac0
88 Siemens 6gk5788-2gd00-0aa0
89 Siemens 6gk5788-2gd00-0ab0
90 Siemens 6gk5788-2gd00-0ta0
91 Siemens 6gk5788-2gd00-0tb0
92 Siemens 6gk5788-2gd00-0tc0
1 Alfa awus036h_firmware
2 Alfa awus036h
: Total Affected Vendor : 3 | Products : 190
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-26141.

URL Resource
http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory
https://www.fragattacks.com Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory
https://www.fragattacks.com Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
google/vanir

Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system. By default, Vanir pulls up-to-date CVEs from Open Source Vulnerabilities (OSV) together with their corresponding signatures so that users can transparently scan missing patches for an up-to-date list of CVEs.

Starlark Python C++

Updated: 2 weeks, 2 days ago
76 stars 4 fork 4 watcher
Born at : Aug. 7, 2024, 7:04 p.m. This repo has been linked 16 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-26141 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2020-26141 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference http://www.openwall.com/lists/oss-security/2021/05/11/12
    Added Reference https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
    Added Reference https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
    Added Reference https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
    Added Reference https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
    Added Reference https://www.fragattacks.com
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Modified Analysis by [email protected]

    Apr. 22, 2022

    Action Type Old Value New Value
    Changed Reference Type https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf No Types Assigned https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf Third Party Advisory
    Changed Reference Type https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu No Types Assigned https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu Third Party Advisory
    Changed Reference Type https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 No Types Assigned https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 Third Party Advisory
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_gr10_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_gr10:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_gr60_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_gr60:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr20_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr20:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr30h_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr30h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr33_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr33:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr36_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr36:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr42_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr42:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr42e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr42e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr44_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr44:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr45_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr45:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr46_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr46:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr46e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr46e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr52_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr52:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr53_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr53:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr53e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr53e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr55_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr55:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr56_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr56:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr70_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr70:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr74_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr74:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr76_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr76:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr84_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr84:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr86_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 27.7.1 OR cpe:2.3:h:cisco:meraki_mr86:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr12_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr12:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr18_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr18:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr26_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr26:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr32_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr32:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr34_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr34:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr62_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr62:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr66_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr66:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mr72_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 26.8.3 OR cpe:2.3:h:cisco:meraki_mr72:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mx64w_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_mx64w:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mx65w_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_mx65w:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mx67w_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_mx67w:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mx67cw_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_mx67cw:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mx68w_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_mx68w:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_mx68cw_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_mx68cw:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_z3_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_z3:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:meraki_z3c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 17.0 OR cpe:2.3:h:cisco:meraki_z3c:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:wireless_ip_phone_8821_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 11.0\(6\)sr2 OR cpe:2.3:h:cisco:wireless_ip_phone_8821:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:ip_phone_6861_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 11.3\(5\) OR cpe:2.3:h:cisco:ip_phone_6861:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:3pcc:*:* versions up to (excluding) 11.3\(5\) OR cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:3pcc:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:ip_phone_8861_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 14.1\(1\) OR cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:ip_phone_8865_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 14.1\(1\) OR cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 14.1\(1\) OR cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:webex_room_series_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.2\(0\)sr1 OR cpe:2.3:h:cisco:webex_room_series:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:webex_desk_series_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.2\(0\)sr1 OR cpe:2.3:h:cisco:webex_desk_series:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:webex_board_series_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 10.8.2.5 OR cpe:2.3:h:cisco:webex_board_series:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:webex_wireless_phone_860_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.4\(0\) OR cpe:2.3:h:cisco:webex_wireless_phone_860:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:cisco:webex_wireless_phone_840_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.4\(0\) OR cpe:2.3:h:cisco:webex_wireless_phone_840:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5778-1gy00-0ab0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5778-1gy00-0ab0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5778-1gy00-0aa0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5778-1gy00-0aa0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5721-1fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5721-1fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5721-1fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5721-1fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5722-1fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5722-1fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5722-1fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5722-1fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5722-1fc00-0ac0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5722-1fc00-0ac0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5734-1fx00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5734-1fx00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5734-1fx00-0aa6_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5734-1fx00-0aa6:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5734-1fx00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5734-1fx00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5734-1fx00-0ab6_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5734-1fx00-0ab6:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5738-1gy00-0aa0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5738-1gy00-0aa0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5738-1gy00-0ab0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5738-1gy00-0ab0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5748-1fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5748-1fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5748-1fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5748-1fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5748-1gd00-0aa0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5748-1gd00-0aa0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5748-1gd00-0ab0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5748-1gd00-0ab0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5761-1fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5761-1fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5761-1fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5761-1fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5774-1fx00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5774-1fx00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5774-1fx00-0aa6_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5774-1fx00-0aa6:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5774-1fx00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5774-1fx00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5774-1fx00-0ab6_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5774-1fx00-0ab6:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5774-1fy00-0ta0_firmware:-:*:*:*:*:*:m12_ecc:* OR cpe:2.3:h:siemens:6gk5774-1fy00-0ta0:-:*:*:*:*:*:m12_ecc:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5774-1fy00-0tb0_firmware:-:*:*:*:*:*:m12_ecc:* OR cpe:2.3:h:siemens:6gk5774-1fy00-0tb0:-:*:*:*:*:*:m12_ecc:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5778-1gy00-0ta0_firmware:-:*:*:*:*:*:m12_ecc:* OR cpe:2.3:h:siemens:6gk5778-1gy00-0ta0:-:*:*:*:*:*:m12_ecc:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5778-1gy00-0tb0_firmware:-:*:*:*:*:*:m12_ecc:* OR cpe:2.3:h:siemens:6gk5778-1gy00-0tb0:-:*:*:*:*:*:m12_ecc:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5786-1fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5786-1fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5786-1fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5786-1fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5786-2fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5786-2fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5786-2fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5786-2fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5786-2fc00-0ac0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5786-2fc00-0ac0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5786-2hc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5786-2hc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5786-2hc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5786-2hc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-1fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5788-1fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-1fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5788-1fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-1gd00-0aa0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5788-1gd00-0aa0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-1gd00-0ab0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5788-1gd00-0ab0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2fc00-0aa0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5788-2fc00-0aa0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2fc00-0ab0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5788-2fc00-0ab0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2fc00-0ac0_firmware:-:*:*:*:*:*:rj45:* OR cpe:2.3:h:siemens:6gk5788-2fc00-0ac0:-:*:*:*:*:*:rj45:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2gd00-0aa0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5788-2gd00-0aa0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2gd00-0ab0_firmware:-:*:*:*:*:*:m12:* OR cpe:2.3:h:siemens:6gk5788-2gd00-0ab0:-:*:*:*:*:*:m12:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2gd00-0ta0_firmware:-:*:*:*:*:*:m12_ecc:* OR cpe:2.3:h:siemens:6gk5788-2gd00-0ta0:-:*:*:*:*:*:m12_ecc:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2gd00-0tb0_firmware:-:*:*:*:*:*:m12_ecc:* OR cpe:2.3:h:siemens:6gk5788-2gd00-0tb0:-:*:*:*:*:*:m12_ecc:*
    Added CPE Configuration AND OR *cpe:2.3:o:siemens:6gk5788-2gd00-0tc0_firmware:-:*:*:*:*:*:m12_ecc:* OR cpe:2.3:h:siemens:6gk5788-2gd00-0tc0:-:*:*:*:*:*:m12_ecc:*
  • CVE Modified by [email protected]

    Oct. 28, 2021

    Action Type Old Value New Value
    Added Reference https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu [No Types Assigned]
    Added Reference https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 [No Types Assigned]
  • CVE Modified by [email protected]

    Jul. 13, 2021

    Action Type Old Value New Value
    Added Reference https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf [No Types Assigned]
  • Initial Analysis by [email protected]

    May. 19, 2021

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:A/AC:L/Au:N/C:N/I:P/A:N)
    Added CVSS V3.1 NIST AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
    Changed Reference Type http://www.openwall.com/lists/oss-security/2021/05/11/12 No Types Assigned http://www.openwall.com/lists/oss-security/2021/05/11/12 Mailing List, Third Party Advisory
    Changed Reference Type https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md No Types Assigned https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md Third Party Advisory
    Changed Reference Type https://www.fragattacks.com No Types Assigned https://www.fragattacks.com Third Party Advisory
    Added CWE NIST CWE-354
    Added CPE Configuration AND OR *cpe:2.3:o:alfa:awus036h_firmware:6.1316.1209:*:*:*:*:windows_10:*:* OR cpe:2.3:h:alfa:awus036h:-:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    May. 11, 2021

    Action Type Old Value New Value
    Added Reference http://www.openwall.com/lists/oss-security/2021/05/11/12 [No Types Assigned]
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-26141 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-26141 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.23 }} 0.07%

score

0.61219

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: