CVE Feed

    Dashboard / CVE / CVE-2020-26141

    CVE-2020-26141

    An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

    Published:May 11, 2021
    Last Modified:Apr 14, 2026
    EPS:May 11, 2021
    EPSS Score:0.00321
    CVSS Score:6.5

    Affected Products

    Vendor
    Alfa
    Product
    Awus036h
    Vendor
    Alfa
    Product
    Awus036h Firmware
    Vendor
    Cisco
    Product
    Ip Conference Phone 8832
    Vendor
    Cisco
    Product
    Ip Conference Phone 8832 Firmware
    Vendor
    Cisco
    Product
    Ip Phone 6861
    Vendor
    Cisco
    Product
    Ip Phone 6861 Firmware
    Vendor
    Cisco
    Product
    Ip Phone 8861
    Vendor
    Cisco
    Product
    Ip Phone 8861 Firmware
    Vendor
    Cisco
    Product
    Ip Phone 8865
    Vendor
    Cisco
    Product
    Ip Phone 8865 Firmware
    Vendor
    Cisco
    Product
    Meraki Gr10
    Vendor
    Cisco
    Product
    Meraki Gr10 Firmware
    Vendor
    Cisco
    Product
    Meraki Gr60
    Vendor
    Cisco
    Product
    Meraki Gr60 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr12
    Vendor
    Cisco
    Product
    Meraki Mr12 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr18
    Vendor
    Cisco
    Product
    Meraki Mr18 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr20
    Vendor
    Cisco
    Product
    Meraki Mr20 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr26
    Vendor
    Cisco
    Product
    Meraki Mr26 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr30h
    Vendor
    Cisco
    Product
    Meraki Mr30h Firmware
    Vendor
    Cisco
    Product
    Meraki Mr32
    Vendor
    Cisco
    Product
    Meraki Mr32 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr33
    Vendor
    Cisco
    Product
    Meraki Mr33 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr34
    Vendor
    Cisco
    Product
    Meraki Mr34 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr36
    Vendor
    Cisco
    Product
    Meraki Mr36 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr42
    Vendor
    Cisco
    Product
    Meraki Mr42 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr42e
    Vendor
    Cisco
    Product
    Meraki Mr42e Firmware
    Vendor
    Cisco
    Product
    Meraki Mr44
    Vendor
    Cisco
    Product
    Meraki Mr44 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr45
    Vendor
    Cisco
    Product
    Meraki Mr45 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr46
    Vendor
    Cisco
    Product
    Meraki Mr46 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr46e
    Vendor
    Cisco
    Product
    Meraki Mr46e Firmware
    Vendor
    Cisco
    Product
    Meraki Mr52
    Vendor
    Cisco
    Product
    Meraki Mr52 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr53
    Vendor
    Cisco
    Product
    Meraki Mr53 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr53e
    Vendor
    Cisco
    Product
    Meraki Mr53e Firmware
    Vendor
    Cisco
    Product
    Meraki Mr55
    Vendor
    Cisco
    Product
    Meraki Mr55 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr56
    Vendor
    Cisco
    Product
    Meraki Mr56 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr62
    Vendor
    Cisco
    Product
    Meraki Mr62 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr66
    Vendor
    Cisco
    Product
    Meraki Mr66 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr70
    Vendor
    Cisco
    Product
    Meraki Mr70 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr72
    Vendor
    Cisco
    Product
    Meraki Mr72 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr74
    Vendor
    Cisco
    Product
    Meraki Mr74 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr76
    Vendor
    Cisco
    Product
    Meraki Mr76 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr84
    Vendor
    Cisco
    Product
    Meraki Mr84 Firmware
    Vendor
    Cisco
    Product
    Meraki Mr86
    Vendor
    Cisco
    Product
    Meraki Mr86 Firmware
    Vendor
    Cisco
    Product
    Meraki Mx64w
    Vendor
    Cisco
    Product
    Meraki Mx64w Firmware
    Vendor
    Cisco
    Product
    Meraki Mx65w
    Vendor
    Cisco
    Product
    Meraki Mx65w Firmware
    Vendor
    Cisco
    Product
    Meraki Mx67cw
    Vendor
    Cisco
    Product
    Meraki Mx67cw Firmware
    Vendor
    Cisco
    Product
    Meraki Mx67w
    Vendor
    Cisco
    Product
    Meraki Mx67w Firmware
    Vendor
    Cisco
    Product
    Meraki Mx68cw
    Vendor
    Cisco
    Product
    Meraki Mx68cw Firmware
    Vendor
    Cisco
    Product
    Meraki Mx68w
    Vendor
    Cisco
    Product
    Meraki Mx68w Firmware
    Vendor
    Cisco
    Product
    Meraki Z3
    Vendor
    Cisco
    Product
    Meraki Z3 Firmware
    Vendor
    Cisco
    Product
    Meraki Z3c
    Vendor
    Cisco
    Product
    Meraki Z3c Firmware
    Vendor
    Cisco
    Product
    Webex Board Series
    Vendor
    Cisco
    Product
    Webex Board Series Firmware
    Vendor
    Cisco
    Product
    Webex Desk Series
    Vendor
    Cisco
    Product
    Webex Desk Series Firmware
    Vendor
    Cisco
    Product
    Webex Room Series
    Vendor
    Cisco
    Product
    Webex Room Series Firmware
    Vendor
    Cisco
    Product
    Webex Wireless Phone 840
    Vendor
    Cisco
    Product
    Webex Wireless Phone 840 Firmware
    Vendor
    Cisco
    Product
    Webex Wireless Phone 860
    Vendor
    Cisco
    Product
    Webex Wireless Phone 860 Firmware
    Vendor
    Cisco
    Product
    Wireless Ip Phone 8821
    Vendor
    Cisco
    Product
    Wireless Ip Phone 8821 Firmware
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Siemens
    Product
    6gk5721-1fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5721-1fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5721-1fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5721-1fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5722-1fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5722-1fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5722-1fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5722-1fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5722-1fc00-0ac0
    Vendor
    Siemens
    Product
    6gk5722-1fc00-0ac0 Firmware
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0aa0
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0aa6
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0aa6 Firmware
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0ab0
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0ab6
    Vendor
    Siemens
    Product
    6gk5734-1fx00-0ab6 Firmware
    Vendor
    Siemens
    Product
    6gk5738-1gy00-0aa0
    Vendor
    Siemens
    Product
    6gk5738-1gy00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5738-1gy00-0ab0
    Vendor
    Siemens
    Product
    6gk5738-1gy00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5748-1fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5748-1fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5748-1fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5748-1fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5748-1gd00-0aa0
    Vendor
    Siemens
    Product
    6gk5748-1gd00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5748-1gd00-0ab0
    Vendor
    Siemens
    Product
    6gk5748-1gd00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5761-1fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5761-1fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5761-1fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5761-1fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0aa0
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0aa6
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0aa6 Firmware
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0ab0
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0ab6
    Vendor
    Siemens
    Product
    6gk5774-1fx00-0ab6 Firmware
    Vendor
    Siemens
    Product
    6gk5774-1fy00-0ta0
    Vendor
    Siemens
    Product
    6gk5774-1fy00-0ta0 Firmware
    Vendor
    Siemens
    Product
    6gk5774-1fy00-0tb0
    Vendor
    Siemens
    Product
    6gk5774-1fy00-0tb0 Firmware
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0aa0
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0ab0
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0ta0
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0ta0 Firmware
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0tb0
    Vendor
    Siemens
    Product
    6gk5778-1gy00-0tb0 Firmware
    Vendor
    Siemens
    Product
    6gk5786-1fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5786-1fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5786-1fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5786-1fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5786-2fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5786-2fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5786-2fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5786-2fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5786-2fc00-0ac0
    Vendor
    Siemens
    Product
    6gk5786-2fc00-0ac0 Firmware
    Vendor
    Siemens
    Product
    6gk5786-2hc00-0aa0
    Vendor
    Siemens
    Product
    6gk5786-2hc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5786-2hc00-0ab0
    Vendor
    Siemens
    Product
    6gk5786-2hc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-1fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5788-1fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-1fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5788-1fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-1gd00-0aa0
    Vendor
    Siemens
    Product
    6gk5788-1gd00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-1gd00-0ab0
    Vendor
    Siemens
    Product
    6gk5788-1gd00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2fc00-0aa0
    Vendor
    Siemens
    Product
    6gk5788-2fc00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2fc00-0ab0
    Vendor
    Siemens
    Product
    6gk5788-2fc00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2fc00-0ac0
    Vendor
    Siemens
    Product
    6gk5788-2fc00-0ac0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0aa0
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0aa0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0ab0
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0ab0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0ta0
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0ta0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0tb0
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0tb0 Firmware
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0tc0
    Vendor
    Siemens
    Product
    6gk5788-2gd00-0tc0 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-111 JSON Hijacking (aka JavaScript Hijacking)
    CAPEC-141 Cache Poisoning
    CAPEC-142 DNS Cache Poisoning
    CAPEC-145 Checksum Spoofing
    CAPEC-160 Exploit Script-Based APIs
    CAPEC-21 Exploitation of Trusted Identifiers
    CAPEC-384 Application API Message Manipulation via Man-in-the-Middle
    CAPEC-385 Transaction or Event Tampering via Application API Manipulation
    CAPEC-386 Application API Navigation Remapping
    CAPEC-387 Navigation Remapping To Propagate Malicious Content
    CAPEC-388 Application API Button Hijacking
    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-510 SaaS User Request Forgery
    CAPEC-59 Session Credential Falsification through Prediction
    CAPEC-60 Reusing Session IDs (aka Session Replay)
    CAPEC-75 Manipulating Writeable Configuration Files
    CAPEC-76 Manipulating Web Input to File System Calls
    CAPEC-89 Pharming

    References

    http://www.openwall.com/lists/oss-security/2021/05/11/12
    https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
    https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
    https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
    https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
    https://www.fragattacks.com
    http://www.openwall.com/lists/oss-security/2021/05/11/12
    https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
    https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
    https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
    https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
    https://www.fragattacks.com
    https://cert-portal.siemens.com/productcert/html/ssa-019200.html
    https://cert-portal.siemens.com/productcert/html/ssa-913875.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High