CVE-2020-26140

Vulnerability in N/a

CVSS score

6.5

EPSS probability

%2.9

Risk score

0.2

Published

5 y ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2020-26140 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2020-26140 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

ID	VENDOR	PRODUCT	ACTION
1	n/a	n/a	View
2	alfa	awus036h firmware	View
3	alfa	awus036h	View
4	siemens	scalance w1748-1 firmware	View
5	siemens	scalance w1748-1	View
6	siemens	scalance w1750d firmware	View
7	siemens	scalance w1750d	View
8	siemens	scalance w1788-1 firmware	View
9	siemens	scalance w1788-1	View
10	siemens	scalance w1788-2 firmware	View
11	siemens	scalance w1788-2	View
12	siemens	scalance w1788-2ia firmware	View
13	siemens	scalance w1788-2ia	View
14	siemens	scalance w721-1 firmware	View
15	siemens	scalance w721-1	View
16	siemens	scalance w722-1 firmware	View
17	siemens	scalance w722-1	View
18	siemens	scalance w734-1 firmware	View
19	siemens	scalance w734-1	View
20	siemens	scalance w738-1 firmware	View
21	siemens	scalance w738-1	View
22	siemens	scalance w748-1 firmware	View
23	siemens	scalance w748-1	View
24	siemens	scalance w761-1 firmware	View
25	siemens	scalance w761-1	View
26	siemens	scalance w774-1 firmware	View
27	siemens	scalance w774-1	View
28	siemens	scalance w778-1 firmware	View
29	siemens	scalance w778-1	View
30	siemens	scalance w786-1 firmware	View
31	siemens	scalance w786-1	View
32	siemens	scalance w786-2 firmware	View
33	siemens	scalance w786-2	View
34	siemens	scalance w786-2ia firmware	View
35	siemens	scalance w786-2ia	View
36	siemens	scalance w788-1 firmware	View
37	siemens	scalance w788-1	View
38	siemens	scalance w788-2 firmware	View
39	siemens	scalance w788-2	View
40	siemens	scalance wam763-1 firmware	View
41	siemens	SCALANCE WAM763-1	View
42	siemens	scalance wam766-1 firmware	View
43	siemens	SCALANCE WAM766-1	View
44	siemens	scalance wam766-1 6ghz firmware	View
45	siemens	scalance wam766-1 6ghz	View
46	siemens	scalance wum763-1 firmware	View
47	siemens	SCALANCE WUM763-1	View
48	siemens	scalance wum766-1 firmware	View
49	siemens	SCALANCE WUM766-1	View
50	siemens	scalance wum766-1 6ghz firmware	View
51	siemens	scalance wum766-1 6ghz	View
52	arista	c-100 firmware	View
53	arista	c-100	View
54	arista	c-110 firmware	View
55	arista	c-110	View
56	arista	c-120 firmware	View
57	arista	c-120	View
58	arista	c-130 firmware	View
59	arista	c-130	View
60	arista	c-200 firmware	View
61	arista	c-200	View
62	arista	c-230 firmware	View
63	arista	c-230	View
64	arista	c-235 firmware	View
65	arista	c-235	View
66	arista	c-250 firmware	View
67	arista	c-250	View
68	arista	c-260 firmware	View
69	arista	c-260	View
70	arista	c-65 firmware	View
71	arista	c-65	View
72	arista	c-75 firmware	View
73	arista	c-75	View
74	arista	o-105 firmware	View
75	arista	o-105	View
76	arista	o-90 firmware	View
77	arista	o-90	View
78	arista	w-118 firmware	View
79	arista	w-118	View
80	arista	w-68 firmware	View
81	arista	w-68	View
82	cisco	1100 firmware	View
83	cisco	1100	View
84	cisco	1100-4p firmware	View
85	cisco	1100-4p	View
86	cisco	1100-8p firmware	View
87	cisco	1100-8p	View
88	cisco	1101-4p firmware	View
89	cisco	1101-4p	View
90	cisco	1109-2p firmware	View
91	cisco	1109-2p	View
92	cisco	1109-4p firmware	View
93	cisco	1109-4p	View
94	cisco	aironet 1532 firmware	View
95	cisco	aironet 1532	View
96	cisco	aironet 1542d firmware	View
97	cisco	aironet 1542d	View
98	cisco	aironet 1542i firmware	View
99	cisco	aironet 1542i	View
100	cisco	aironet 1552 firmware	View
101	cisco	aironet 1552	View
102	cisco	aironet 1552h firmware	View
103	cisco	aironet 1552h	View
104	cisco	aironet 1560 firmware	View
105	cisco	aironet 1560	View
106	cisco	aironet 1562d firmware	View
107	cisco	aironet 1562d	View
108	cisco	aironet 1562e firmware	View
109	cisco	aironet 1562e	View
110	cisco	aironet 1562i firmware	View
111	cisco	aironet 1562i	View
112	cisco	aironet 1572 firmware	View
113	cisco	aironet 1572	View
114	cisco	aironet 1702 firmware	View
115	cisco	aironet 1702	View
116	cisco	aironet 1800 firmware	View
117	cisco	aironet 1800	View
118	cisco	aironet 1800i firmware	View
119	cisco	aironet 1800i	View
120	cisco	aironet 1810 firmware	View
121	cisco	aironet 1810	View
122	cisco	aironet 1810w firmware	View
123	cisco	aironet 1810w	View
124	cisco	aironet 1815 firmware	View
125	cisco	aironet 1815	View
126	cisco	aironet 1815i firmware	View
127	cisco	aironet 1815i	View
128	cisco	aironet 1832 firmware	View
129	cisco	aironet 1832	View
130	cisco	aironet 1842 firmware	View
131	cisco	aironet 1842	View
132	cisco	aironet 1852 firmware	View
133	cisco	aironet 1852	View
134	cisco	aironet 2702 firmware	View
135	cisco	aironet 2702	View
136	cisco	aironet 2800 firmware	View
137	cisco	aironet 2800	View
138	cisco	aironet 2800e firmware	View
139	cisco	aironet 2800e	View
140	cisco	aironet 2800i firmware	View
141	cisco	aironet 2800i	View
142	cisco	aironet 3702 firmware	View
143	cisco	aironet 3702	View
144	cisco	aironet 3800 firmware	View
145	cisco	aironet 3800	View
146	cisco	aironet 3800e firmware	View
147	cisco	aironet 3800e	View
148	cisco	aironet 3800i firmware	View
149	cisco	aironet 3800i	View
150	cisco	aironet 3800p firmware	View
151	cisco	aironet 3800p	View
152	cisco	aironet 4800 firmware	View
153	cisco	aironet 4800	View
154	cisco	aironet ap803 firmware	View
155	cisco	aironet ap803	View
156	cisco	aironet iw3702 firmware	View
157	cisco	aironet iw3702	View
158	cisco	catalyst 9105 firmware	View
159	cisco	catalyst 9105	View
160	cisco	catalyst 9105axi firmware	View
161	cisco	catalyst 9105axi	View
162	cisco	catalyst 9105axw firmware	View
163	cisco	catalyst 9105axw	View
164	cisco	catalyst 9115 firmware	View
165	cisco	catalyst 9115	View
166	cisco	catalyst 9115 ap firmware	View
167	cisco	catalyst 9115 ap	View
168	cisco	catalyst 9115axe firmware	View
169	cisco	catalyst 9115axe	View
170	cisco	catalyst 9115axi firmware	View
171	cisco	catalyst 9115axi	View
172	cisco	catalyst 9117 firmware	View
173	cisco	catalyst 9117	View
174	cisco	catalyst 9117 ap firmware	View
175	cisco	catalyst 9117 ap	View
176	cisco	catalyst 9117axi firmware	View
177	cisco	catalyst 9117axi	View
178	cisco	catalyst 9120 firmware	View
179	cisco	catalyst 9120	View
180	cisco	catalyst 9120 ap firmware	View
181	cisco	catalyst 9120 ap	View
182	cisco	catalyst 9120axe firmware	View
183	cisco	catalyst 9120axe	View
184	cisco	catalyst 9120axi firmware	View
185	cisco	catalyst 9120axi	View
186	cisco	catalyst 9120axp firmware	View
187	cisco	catalyst 9120axp	View
188	cisco	catalyst 9124 firmware	View
189	cisco	catalyst 9124	View
190	cisco	catalyst 9124axd firmware	View
191	cisco	catalyst 9124axd	View
192	cisco	catalyst 9124axi firmware	View
193	cisco	catalyst 9124axi	View
194	cisco	catalyst 9130 firmware	View
195	cisco	catalyst 9130	View
196	cisco	catalyst 9130 ap firmware	View
197	cisco	catalyst 9130 ap	View
198	cisco	catalyst 9130axe firmware	View
199	cisco	catalyst 9130axe	View
200	cisco	catalyst 9130axi firmware	View

Total affected vendors: 5|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCORE	VERSION	SEVERITY	VECTOR	SOURCE
6.5	CVSS V31	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	NVD
3.3	CVSS V2	—	AV:A/AC:L/Au:N/C:N/I:P/A:N	NVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.

Restrict access to internet-facing services and apply network segmentation.

Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.

Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-26140 is associated with the following CWEs:

CWE-327: Common Weakness Enumeration Entry CWE-327

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2020-26140 weaknesses.

CAPEC-66: SQL Injection CAPEC-126: Path Traversal CAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureBitişik ağ

PermissionsGerekmiyor

UserGerekmiyor

Official Sources and Advisories

20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021vendor-advisory https://www.fragattacks.comvendor-advisory https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdvendor-advisory [oss-security] 20210511 various 802.11 security issues - fragattacks.comvendor-advisory https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfvendor-advisory https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63vendor-advisory https://cert-portal.siemens.com/productcert/html/ssa-019200.htmlnvd https://cert-portal.siemens.com/productcert/html/ssa-913875.htmlnvd

CVSS Vector Radar Chart

6.5 / 10

Vulnerability Scoring Details

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack VectorAdjacent network

Attack ComplexityLow

Privileges RequiredNone required

User InteractionNone required

Confidentiality (Gizlilik)Low

Integrity (Bütünlük)None

Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

Weakness Type (CWE & CAPEC)

CWE-327

Similar Vulnerabilities

10.0

CVE-2021-44228 Actively exploited

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2020-26140"