Mitsubishi Electric GT25-WLAN
There are multiple vulnerabilities due to design flaws in the frame fragmentation functionality and the frame aggregation functionality in the Wireless Communication Standards IEEE 802.11. These vulnerabilities could allow an attacker to steal communication contents or inject unauthorized packets.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-26146US | medium5.3 | — | ||
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can… | ||||
| CVE-2020-26144US | medium6.5 | — | ||
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspon… | ||||
| CVE-2020-26143US | medium6.5 | — | ||
An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-… | ||||
| CVE-2020-26140US | medium6.5OT elevated | — | ||
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. A… | ||||
| CVE-2020-24588US | low3.5OT elevated | — | ||
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header… | ||||
| CVE-2020-24587US | low2.6OT elevated | — | ||
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under… | ||||
| CVE-2020-24586US | low3.5 | — | ||
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory af… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan