PT-2021-3057 · Check Point+11 · Check Point Gaia+11
Published
2016-03-17
·
Updated
2026-03-10
·
CVE-2020-24588
CVSS v3.1
3.5
Low
| Vector | AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
802.11 standard (affected versions not specified)
Check Point GAiA (affected versions not specified)
Description
The issue concerns a flaw in the authentication procedure of the 802.11 standard, which underlies Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP). Specifically, the A-MSDU flag in the plaintext QoS header field is not required to be authenticated. This can be exploited by an adversary to inject arbitrary network packets into devices that support receiving non-SSP A-MSDU frames, a feature mandatory for 802.11n compliance. The vulnerability allows for spoofing, enabling attackers to affect the system.
Recommendations
For the 802.11 standard, consider disabling support for non-SSP A-MSDU frames as a temporary workaround until a patch is available.
For Check Point GAiA, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of a Broken Cryptographic Algorithm
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Check Point Gaia
Debian
Freebsd
Linuxmint
Red Hat
Suse
Ubuntu
Windows