VDB

CVE-2020-26140

CVE-2020-26140 PUBLISHED CVSS 6.5 MEDIUM

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

EPSS 2.92% · 86.9th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
2.92%
86.9th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1023.26.1, 6.8.0-1024.27.1, 6.8.0-1029.32.1
Ubuntu:Pro:16.04:LTSlinux-kvm4.4.0-1123.133, 4.4.0-1122.132, 4.4.0-1121.131
Ubuntu:Pro:20.04:LTSlinux-intel-iotg-5.155.15.0-1016.21~20.04.1, 0, 5.15.0-1010.14~20.04.1
Ubuntu:Pro:FIPS:20.04:LTSlinux-aws-fips5.4.0-1021.21+fips2, 0
Ubuntu:25.10linux-azure-fde6.17.0-1003.3, 6.17.0-1004.4, 6.17.0-1005.5
Ubuntu:Pro:20.04:LTSlinux-nvidia-tegra-5.155.15.0-1046.46~20.04.1, *, 5.15.0-1053.53~20.04.1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1071.74, 5.15.0-1068.71, 5.15.0-1066.69
Ubuntu:24.04:LTSlinux-oracle-6.17*, 6.17.0-1004.4~24.04.2, 0
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37, 6.8.0-1025.25, 6.8.0-1039.39
Ubuntu:20.04:LTSlinux-riscv-5.115.11.0-1030.34, 5.11.0-1029.32~20.04.1, 5.11.0-1022.23~20.04.1
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1017.17~24.04.1, *, 6.14.0-1018.18~24.04.1
Ubuntu:Pro:20.04:LTSlinux-oracle5.4.0-1115.124, 5.4.0-1126.135, 5.4.0-1152.162
Ubuntu:24.04:LTSlinux-azure-nvidia-6.146.14.0-1003.3, 6.14.0-1006.6, 0
Ubuntu:20.04:LTSlinux-gcp-5.135.13.0-1023.28~20.04.1, 0, 5.13.0-1012.15~20.04.1
Ubuntu:22.04:LTSlinux-aws-5.19*, 5.19.0-1019.20~22.04.1, 0
Ubuntu:24.04:LTSlinux-raspi6.8.0-1011.12, 6.8.0-1029.33, 6.8.0-1030.34
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1004.4~24.04.3, 0, *
Ubuntu:20.04:LTSlinux-oracle-5.130, 5.13.0-1027.32~20.04.1, 5.13.0-1028.33~20.04.1
Ubuntu:Pro:20.04:LTSlinux-ibm5.4.0-1034.38, 5.4.0-1040.45, 5.4.0-1041.46
Ubuntu:22.04:LTSlinux-aws-6.20, 6.2.0-1006.6~22.04.1, 6.2.0-1007.7~22.04.1

…and 219 more

Timeline

  • CVE Published
  • May 12, 2021 EPSS Score
  • Jul 15, 2021 EPSS Score
  • Jul 23, 2021 PoC Published
  • Sep 15, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Jan 17, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 21, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 22, 2022 EPSS Score
  • Sep 24, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›