PT-2021-3311 · Unknown+12 · 802.11 Standard+12

Published 2016-03-17 · Updated 2026-03-10 · CVE-2020-24587

Positive Technologies (AI Summary)

CVSS v3.1

2.6

Low

Base vector

AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions 802.11 standard (affected versions not specified)

Description The issue concerns the 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP). It does not require that all fragments of a frame are encrypted under the same key, allowing an adversary to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed. This can enable an attacker to forge encrypted frames and potentially exfiltrate sensitive data from a targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of a Broken Cryptographic Algorithm

Inadequate Encryption Strength

Weakness Enumeration

CWE-327

CWE-326

Related Identifiers

ALSA-2021:4356

ALT-PU-2016-1262

ALT-PU-2017-1299

ALT-PU-2018-1557

ALT-PU-2019-1139

ALT-PU-2019-1363

ALT-PU-2020-1145

ALT-PU-2020-1251

ALT-PU-2020-2164

ALT-PU-2021-1447

ALT-PU-2021-1525

ALT-PU-2021-1869

ALT-PU-2021-1917

ALT-PU-2021-1920

ALT-PU-2021-1946

ALT-PU-2021-1948

ALT-PU-2021-1961

ALT-PU-2021-1990

ALT-PU-2021-2026

ALT-PU-2021-2165

ALT-PU-2021-2293

ALT-PU-2021-2305

ALT-PU-2021-2307

ALT-PU-2021-2315

ALT-PU-2021-2326

ALT-PU-2021-2330

ALT-PU-2021-2370

ALT-PU-2021-2671

ALT-PU-2021-2672

ALT-PU-2021-2677

ALT-PU-2021-2678

ALT-PU-2021-2737

ALT-PU-2021-2751

ALT-PU-2022-1240

ALT-PU-2022-2096

BDU:2021-03088

CESA-2021_4140

CESA-2021_4356

CVE-2020-24587

DLA-2689-1

DLA-2690-1

DLA-3380-1

MGASA-2021-0257

MGASA-2021-0258

OPENSUSE-SU-2021:0843-1

OPENSUSE-SU-2021:0947-1

OPENSUSE-SU-2021:1975-1

OPENSUSE-SU-2021:1977-1

OPENSUSE-SU-2021_0843-1

OPENSUSE-SU-2021_0947-1

OPENSUSE-SU-2021_1975-1

OPENSUSE-SU-2021_1977-1

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

RHSA-2021:4140

RHSA-2021:4356

RHSA-2021_4140

RHSA-2021_4356

SUSE-SU-2021:14764-1

SUSE-SU-2021:1887-1

SUSE-SU-2021:1888-1

SUSE-SU-2021:1889-1

SUSE-SU-2021:1890-1

SUSE-SU-2021:1891-1

SUSE-SU-2021:1899-1

SUSE-SU-2021:1912-1

SUSE-SU-2021:1913-1

SUSE-SU-2021:1975-1

SUSE-SU-2021:1977-1

SUSE-SU-2021:2208-1

SUSE-SU-2021:2406-1

SUSE-SU-2021:2421-1

SUSE-SU-2021:2451-1

SUSE-SU-2021_14764-1

USN-4997-1

USN-4997-2

USN-4999-1

USN-5000-1

USN-5000-2

USN-5001-1

USN-5018-1

Affected Products

802.11 Standard

Alt Linux

Almalinux

Astra Linux

Centos

Check Point Gaia

Debian

Fortios

Linuxmint

Red Hat

Suse

Ubuntu

Windows

References · 778

• 🔥 https://fragattacks.com · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10728-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33200 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9453.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1889-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33034 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0947-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1977-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24587 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24587 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5000-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25672 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9459.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1890-1 · Vendor Advisory