Arista C-75 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Arista C-75 Firmware: 3 record(s), with affected versions and fixes.cpe:2.3:o:arista:c-75_firmware
CVE-2020-24588
Low · 3.5
CWE-327 May 11, 2021
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
CVE-2020-26144
Medium · 6.5
CWE-20 May 11, 2021
Improper Input Validation in Samsung Galaxy I9305 Firmware
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
CVE-2020-26140
Medium · 6.5
CWE-327 May 11, 2021
Use of a Broken or Risky Cryptographic Algorithm in Alfa Awus036h Firmware
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.