Vulnerability Intelligence Report
CVE-2020-24588
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
No Active Exploit Signals
CVSS Base Score
3.5
LOW
EPSS Probability:3.54%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| ieee | ieee_802.11 | all |
| linux | mac80211 | all |
| microsoft | windows_10 | 20h2, 1607, 1803, 1809, 1909, 2004 |
| microsoft | windows_7 | all |
| microsoft | windows_8.1 | all |
| microsoft | windows_rt_8.1 | all |
| microsoft | windows_server_2008 | r2 |
| microsoft | windows_server_2012 | all |
| microsoft | windows_server_2016 | 2004 |
| microsoft | windows_server_2019 | all |
| debian | debian_linux | 9.0 |
| siemens | scalance_w1748-1_firmware | all |
| siemens | scalance_w1748-1 | all |
| siemens | scalance_w1750d_firmware | all |
| siemens | scalance_w1750d | all |
| siemens | scalance_w1788-1_firmware | all |
| siemens | scalance_w1788-1 | all |
| siemens | scalance_w1788-2_firmware | all |
| siemens | scalance_w1788-2 | all |
| siemens | scalance_w1788-2ia_firmware | all |
| siemens | scalance_w1788-2ia | all |
| siemens | scalance_w721-1_firmware | all |
| siemens | scalance_w721-1 | all |
| siemens | scalance_w722-1_firmware | all |
| siemens | scalance_w722-1 | all |
| siemens | scalance_w734-1_firmware | all |
| siemens | scalance_w734-1 | all |
| siemens | scalance_w738-1_firmware | all |
| siemens | scalance_w738-1 | all |
| siemens | scalance_w748-1_firmware | all |
| siemens | scalance_w748-1 | all |
| siemens | scalance_w761-1_firmware | all |
| siemens | scalance_w761-1 | all |
| siemens | scalance_w774-1_firmware | all |
| siemens | scalance_w774-1 | all |
| siemens | scalance_w778-1_firmware | all |
| siemens | scalance_w778-1 | all |
| siemens | scalance_w786-1_firmware | all |
| siemens | scalance_w786-1 | all |
| siemens | scalance_w786-2_firmware | all |
| siemens | scalance_w786-2 | all |
| siemens | scalance_w786-2ia_firmware | all |
| siemens | scalance_w786-2ia | all |
| siemens | scalance_w788-1_firmware | all |
| siemens | scalance_w788-1 | all |
| siemens | scalance_w788-2_firmware | all |
| siemens | scalance_w788-2 | all |
| siemens | scalance_wam763-1_firmware | all |
| siemens | scalance_wam763-1 | all |
| siemens | scalance_wam766-1_firmware | all |
| siemens | scalance_wam766-1 | all |
| siemens | scalance_wam766-1_6ghz_firmware | all |
| siemens | scalance_wam766-1_6ghz | all |
| siemens | scalance_wum763-1_firmware | all |
| siemens | scalance_wum763-1 | all |
| siemens | scalance_wum766-1_firmware | all |
| siemens | scalance_wum766-1 | all |
| siemens | scalance_wum766-1_6ghz_firmware | all |
| siemens | scalance_wum766-1_6ghz | all |
| arista | c-100_firmware | all |
| arista | c-100 | all |
| arista | c-110_firmware | all |
| arista | c-110 | all |
| arista | c-120_firmware | all |
| arista | c-120 | all |
| arista | c-130_firmware | all |
| arista | c-130 | all |
| arista | c-200_firmware | all |
| arista | c-200 | all |
| arista | c-230_firmware | all |
| arista | c-230 | all |
| arista | c-235_firmware | all |
| arista | c-235 | all |
| arista | c-250_firmware | all |
| arista | c-250 | all |
| arista | c-260_firmware | all |
| arista | c-260 | all |
| arista | c-65_firmware | all |
| arista | c-65 | all |
| arista | c-75_firmware | all |
| arista | c-75 | all |
| arista | o-105_firmware | all |
| arista | o-105 | all |
| arista | o-90_firmware | all |
| arista | o-90 | all |
| arista | w-118_firmware | all |
| arista | w-118 | all |
| arista | w-68_firmware | all |
| arista | w-68 | all |
| cisco | 1100_firmware | all |
| cisco | 1100 | all |
| cisco | 1100-4p_firmware | all |
| cisco | 1100-4p | all |
| cisco | 1100-8p_firmware | all |
| cisco | 1100-8p | all |
| cisco | 1101-4p_firmware | all |
| cisco | 1101-4p | all |
| cisco | 1109-2p_firmware | all |
| cisco | 1109-2p | all |
| cisco | 1109-4p_firmware | all |
| cisco | 1109-4p | all |
| cisco | aironet_1532_firmware | all |
| cisco | aironet_1532 | all |
| cisco | aironet_1542d_firmware | all |
| cisco | aironet_1542d | all |
| cisco | aironet_1542i_firmware | all |
| cisco | aironet_1542i | all |
| cisco | aironet_1800_firmware | all |
| cisco | aironet_1800 | all |
| cisco | aironet_1800i_firmware | all |
| cisco | aironet_1800i | all |
| cisco | aironet_1810_firmware | all |
| cisco | aironet_1810 | all |
| cisco | aironet_1810w_firmware | all |
| cisco | aironet_1810w | all |
| cisco | aironet_1815_firmware | all |
| cisco | aironet_1815 | all |
| cisco | aironet_1815i_firmware | all |
| cisco | aironet_1815i | all |
| cisco | aironet_1832_firmware | all |
| cisco | aironet_1832 | all |
| cisco | aironet_1842_firmware | all |
| cisco | aironet_1842 | all |
| cisco | aironet_1852_firmware | all |
| cisco | aironet_1852 | all |
| cisco | aironet_ap803_firmware | all |
| cisco | aironet_ap803 | all |
| cisco | aironet_iw3702_firmware | all |
| cisco | aironet_iw3702 | all |
| cisco | catalyst_9105_firmware | all |
| cisco | catalyst_9105 | all |
| cisco | catalyst_9105axi_firmware | all |
| cisco | catalyst_9105axi | all |
| cisco | catalyst_9105axw_firmware | all |
| cisco | catalyst_9105axw | all |
| cisco | catalyst_9115_firmware | all |
| cisco | catalyst_9115 | all |
| cisco | catalyst_9115_ap_firmware | all |
| cisco | catalyst_9115_ap | all |
| cisco | catalyst_9115axe_firmware | all |
| cisco | catalyst_9115axe | all |
| cisco | catalyst_9115axi_firmware | all |
| cisco | catalyst_9115axi | all |
| cisco | catalyst_9117_firmware | all |
| cisco | catalyst_9117 | all |
| cisco | catalyst_9117_ap_firmware | all |
| cisco | catalyst_9117_ap | all |
| cisco | catalyst_9117axi_firmware | all |
| cisco | catalyst_9117axi | all |
| cisco | catalyst_9120_firmware | all |
| cisco | catalyst_9120 | all |
| cisco | catalyst_9120_ap_firmware | all |
| cisco | catalyst_9120_ap | all |
| cisco | catalyst_9120axe_firmware | all |
| cisco | catalyst_9120axe | all |
| cisco | catalyst_9120axi_firmware | all |
| cisco | catalyst_9120axi | all |
| cisco | catalyst_9120axp_firmware | all |
| cisco | catalyst_9120axp | all |
| cisco | catalyst_9124_firmware | all |
| cisco | catalyst_9124 | all |
| cisco | catalyst_9124axd_firmware | all |
| cisco | catalyst_9124axd | all |
| cisco | catalyst_9124axi_firmware | all |
| cisco | catalyst_9124axi | all |
| cisco | catalyst_9130_firmware | all |
| cisco | catalyst_9130 | all |
| cisco | catalyst_9130_ap_firmware | all |
| cisco | catalyst_9130_ap | all |
| cisco | catalyst_9130axe_firmware | all |
| cisco | catalyst_9130axe | all |
| cisco | catalyst_9130axi_firmware | all |
| cisco | catalyst_9130axi | all |
| cisco | ip_phone_6861_firmware | all |
| cisco | ip_phone_6861 | all |
| cisco | ip_phone_8821_firmware | all |
| cisco | ip_phone_8821 | all |
| cisco | ip_phone_8832_firmware | all |
| cisco | ip_phone_8832 | all |
| cisco | ip_phone_8861_firmware | all |
| cisco | ip_phone_8861 | all |
| cisco | ip_phone_8865_firmware | all |
| cisco | ip_phone_8865 | all |
| cisco | ir829-2lte-ea-ak9_firmware | all |
| cisco | ir829-2lte-ea-ak9 | all |
| cisco | ir829-2lte-ea-bk9_firmware | all |
| cisco | ir829-2lte-ea-bk9 | all |
| cisco | ir829-2lte-ea-ek9_firmware | all |
| cisco | ir829-2lte-ea-ek9 | all |
| cisco | ir829gw-lte-ga-ck9_firmware | all |
| cisco | ir829gw-lte-ga-ck9 | all |
| cisco | ir829gw-lte-ga-ek9_firmware | all |
| cisco | ir829gw-lte-ga-ek9 | all |
| cisco | ir829gw-lte-ga-sk9_firmware | all |
| cisco | ir829gw-lte-ga-sk9 | all |
| cisco | ir829gw-lte-ga-zk9_firmware | all |
| cisco | ir829gw-lte-ga-zk9 | all |
| cisco | ir829gw-lte-na-ak9_firmware | all |
| cisco | ir829gw-lte-na-ak9 | all |
| cisco | ir829gw-lte-vz-ak9_firmware | all |
| cisco | ir829gw-lte-vz-ak9 | all |
| cisco | meraki_gr10_firmware | all |
| cisco | meraki_gr10 | all |
| cisco | meraki_gr60_firmware | all |
| cisco | meraki_gr60 | all |
| cisco | meraki_mr12_firmware | all |
| cisco | meraki_mr12 | all |
| cisco | meraki_mr20_firmware | all |
| cisco | meraki_mr20 | all |
| cisco | meraki_mr26_firmware | all |
| cisco | meraki_mr26 | all |
| cisco | meraki_mr30h_firmware | all |
| cisco | meraki_mr30h | all |
| cisco | meraki_mr32_firmware | all |
| cisco | meraki_mr32 | all |
| cisco | meraki_mr33_firmware | all |
| cisco | meraki_mr33 | all |
| cisco | meraki_mr34_firmware | all |
| cisco | meraki_mr34 | all |
| cisco | meraki_mr36_firmware | all |
| cisco | meraki_mr36 | all |
| cisco | meraki_mr42_firmware | all |
| cisco | meraki_mr42 | all |
| cisco | meraki_mr42e_firmware | all |
| cisco | meraki_mr42e | all |
| cisco | meraki_mr44_firmware | all |
| cisco | meraki_mr44 | all |
| cisco | meraki_mr45_firmware | all |
| cisco | meraki_mr45 | all |
| cisco | meraki_mr46_firmware | all |
| cisco | meraki_mr46 | all |
| cisco | meraki_mr46e_firmware | all |
| cisco | meraki_mr46e | all |
| cisco | meraki_mr52_firmware | all |
| cisco | meraki_mr52 | all |
| cisco | meraki_mr53_firmware | all |
| cisco | meraki_mr53 | all |
| cisco | meraki_mr53e_firmware | all |
| cisco | meraki_mr53e | all |
| cisco | meraki_mr55_firmware | all |
| cisco | meraki_mr55 | all |
| cisco | meraki_mr56_firmware | all |
| cisco | meraki_mr56 | all |
| cisco | meraki_mr62_firmware | all |
| cisco | meraki_mr62 | all |
| cisco | meraki_mr66_firmware | all |
| cisco | meraki_mr66 | all |
| cisco | meraki_mr70_firmware | all |
| cisco | meraki_mr70 | all |
| cisco | meraki_mr72_firmware | all |
| cisco | meraki_mr72 | all |
| cisco | meraki_mr74_firmware | all |
| cisco | meraki_mr74 | all |
| cisco | meraki_mr76_firmware | all |
| cisco | meraki_mr76 | all |
| cisco | meraki_mr84_firmware | all |
| cisco | meraki_mr84 | all |
| cisco | meraki_mr86_firmware | all |
| cisco | meraki_mr86 | all |
| cisco | meraki_mx64w_firmware | all |
| cisco | meraki_mx64w | all |
| cisco | meraki_mx65w_firmware | all |
| cisco | meraki_mx65w | all |
| cisco | meraki_mx67cw_firmware | all |
| cisco | meraki_mx67cw | all |
| cisco | meraki_mx67w_firmware | all |
| cisco | meraki_mx67w | all |
| cisco | meraki_mx68cw_firmware | all |
| cisco | meraki_mx68cw | all |
| cisco | meraki_mx68w_firmware | all |
| cisco | meraki_mx68w | all |
| cisco | meraki_z3_firmware | all |
| cisco | meraki_z3 | all |
| cisco | meraki_z3c_firmware | all |
| cisco | meraki_z3c | all |
| cisco | webex_board_55_firmware | all |
| cisco | webex_board_55 | all |
| cisco | webex_board_55s_firmware | all |
| cisco | webex_board_55s | all |
| cisco | webex_board_70_firmware | all |
| cisco | webex_board_70 | all |
| cisco | webex_board_70s_firmware | all |
| cisco | webex_board_70s | all |
| cisco | webex_board_85s_firmware | all |
| cisco | webex_board_85s | all |
| cisco | webex_dx70_firmware | all |
| cisco | webex_dx70 | all |
| cisco | webex_dx80_firmware | all |
| cisco | webex_dx80 | all |
| cisco | webex_room_55_firmware | all |
| cisco | webex_room_55 | all |
| cisco | webex_room_55_dual_firmware | all |
| cisco | webex_room_55_dual | all |
| cisco | webex_room_70_firmware | all |
| cisco | webex_room_70 | all |
| cisco | webex_room_70_dual_firmware | all |
| cisco | webex_room_70_dual | all |
| cisco | webex_room_70_dual_g2_firmware | all |
| cisco | webex_room_70_dual_g2 | all |
| cisco | webex_room_70_single_firmware | all |
| cisco | webex_room_70_single | all |
| cisco | webex_room_70_single_g2_firmware | all |
| cisco | webex_room_70_single_g2 | all |
| cisco | webex_room_kit_firmware | all |
| cisco | webex_room_kit | all |
| cisco | webex_room_kit_mini_firmware | all |
| cisco | webex_room_kit_mini | all |
| intel | ac_8260_firmware | all |
| intel | ac_8260 | all |
| intel | ac_8265_firmware | all |
| intel | ac_8265 | all |
| intel | ac_9260_firmware | all |
| intel | ac_9260 | all |
| intel | ac_9560_firmware | all |
| intel | ac_9560 | all |
| intel | killer_ac_1550_firmware | all |
| intel | killer_ac_1550 | all |
| intel | killer_wi-fi_6_ax1650_firmware | all |
| intel | killer_wi-fi_6_ax1650 | all |
| intel | killer_wi-fi_6e_ax1675_firmware | all |
| intel | killer_wi-fi_6e_ax1675 | all |
| intel | proset_ac_3165_firmware | all |
| intel | proset_ac_3165 | all |
| intel | proset_ac_3168_firmware | all |
| intel | proset_ac_3168 | all |
| intel | proset_ac_8260_firmware | all |
| intel | proset_ac_8260 | all |
| intel | proset_ac_8265_firmware | all |
| intel | proset_ac_8265 | all |
| intel | proset_ac_9260_firmware | all |
| intel | proset_ac_9260 | all |
| intel | proset_ac_9461_firmware | all |
| intel | proset_ac_9461 | all |
| intel | proset_ac_9462_firmware | all |
| intel | proset_ac_9462 | all |
| intel | proset_ac_9560_firmware | all |
| intel | proset_ac_9560 | all |
| intel | proset_wi-fi_6_ax200_firmware | all |
| intel | proset_wi-fi_6_ax200 | all |
| intel | proset_wi-fi_6_ax201_firmware | all |
| intel | proset_wi-fi_6_ax201 | all |
| intel | proset_wi-fi_6e_ax210_firmware | all |
| intel | proset_wi-fi_6e_ax210 | all |
| intel | proset_wireless_7265_\(rev_d\)_firmware | all |
| intel | proset_wireless_7265_\(rev_d\) | all |
| intel | wi-fi_6_ax200_firmware | all |
| intel | wi-fi_6_ax200 | all |
| intel | wi-fi_6_ax201_firmware | all |
| intel | wi-fi_6_ax201 | all |
| linux | linux_kernel | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.537%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2020-08-21T00:00:00 |
| Published | 2021-05-11T00:00:00 |
| Last Updated | 2026-04-14T08:48:59 |
Community Chatter & Buzz