CVE-2020-26139

Katalog CVE

CVSS 5.3 · Medium EPSS 6,5%

Kerentanan Improper Authentication pada netbsd, debian linux +58 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Rincian

Terbit di NVD

11 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

6,5% peluang dieksploitasi; lebih tinggi dari 93,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 166 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/05/11/12 mailing list · advisory pihak ketiga
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html mailing list · advisory pihak ketiga
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu advisory pihak ketiga
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 advisory pihak ketiga
• https://www.fragattacks.com advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-019200.html
• https://cert-portal.siemens.com/productcert/html/ssa-913875.html