Vulnerabilidades do Arista C-130 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Arista C-130 Firmware: 3 registro(s), com versões afetadas e correções.cpe:2.3:o:arista:c-130_firmware
CVE-2020-24588
Baixa · 3.5
CWE-327 11/05/2021
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
CVE-2020-26144
Média · 6.5
CWE-20 11/05/2021
Improper Input Validation em Samsung Galaxy I9305 Firmware
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
CVE-2020-26140
Média · 6.5
CWE-327 11/05/2021
Use of a Broken or Risky Cryptographic Algorithm em Alfa Awus036h Firmware
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.