Mitsubishi Electric GT25-WLAN
There are multiple vulnerabilities due to design flaws in the frame fragmentation functionality and the frame aggregation functionality in the Wireless Communication Standards IEEE 802.11. These vulnerabilities could allow an attacker to steal communication contents or inject unauthorized packets.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-26146US | medium5.3 | — | ||
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can… | ||||
| CVE-2020-26144US | medium6.5 | — | ||
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspon… | ||||
| CVE-2020-26143US | medium6.5 | — | ||
An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-… | ||||
| CVE-2020-26140US | medium6.5OT erhöht | — | ||
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. A… | ||||
| CVE-2020-24588US | low3.5OT erhöht | — | ||
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header… | ||||
| CVE-2020-24587US | low2.6OT erhöht | — | ||
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under… | ||||
| CVE-2020-24586US | low3.5 | — | ||
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory af… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (7)
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
- MitigationGT25-WLAN
After writing the required package data to the GOT, refer to the “How to check the versions in use” and check the fixed versions.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan