Vulnetix
Try Vulnetix Request Demo
SSA-913875 PUBLISHED CVSS 3.5 LOW

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

Risk Scores

CVSS v3.1
3.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
SiemensSCALANCE W774-1 RJ45 (USA) (6GK5774-1FX00-0AB6)
SiemensSCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0)
SiemensSCALANCE W778-1 M12 (6GK5778-1GY00-0AA0)
SiemensSCALANCE W786-1 RJ45 (6GK5786-1FC00-0AB0)
SiemensSCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0)
SiemensSCALANCE W778-1 M12 EEC (6GK5778-1GY00-0TA0)
SiemensSCALANCE WAM763-1 (6GK5763-1AL00-7DA0)
SiemensSCALANCE W786-2 RJ45 (6GK5786-2FC00-0AC0)
SiemensSCALANCE W774-1 RJ45 (6GK5774-1FX00-0AB0)
SiemensSCALANCE W786-1 RJ45 (6GK5786-1FC00-0AA0)
SiemensSCALANCE WAM766-1 (6GK5766-1GE00-7DA0)
SiemensSCALANCE WUM763-1 (6GK5763-1AL00-3DA0)
SiemensSCALANCE W788-2 RJ45 (6GK5788-2FC00-0AA0)
SiemensSCALANCE WUM766-1 (6GK5766-1GE00-3DA0)
SiemensSCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0)
SiemensSCALANCE W774-1 RJ45 (6GK5774-1FX00-0AA6)
SiemensSCALANCE W788-2 RJ45 (6GK5788-2FC00-0AC0)
SiemensSCALANCE W748-1 RJ45 (6GK5748-1FC00-0AA0)
SiemensSCALANCE W761-1 RJ45 (6GK5761-1FC00-0AA0)
SiemensSCALANCE W774-1 M12 EEC (6GK5774-1FY00-0TA0)

…and 47 more

Timeline

References

Open in Interactive Console →