MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2020-26141

CVSS 6.5v3.1pub. 2021-05-11upd. 2026-04-14

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Alfa Awus036h

    HW
    Alfa
    all versions

  • Alfa Awus036h Firmware

    OS
    Alfa
    6.1316.1209

  • Cisco Ip Conference Phone 8832

    HW
    Cisco
    all versions

  • Cisco Ip Conference Phone 8832 Firmware

    OS
    Cisco
    < 14.1\(1\)

  • Cisco Ip Phone 6861

    HW
    Cisco
    all versions

  • Cisco Ip Phone 6861 Firmware

    OS
    Cisco
    < 11.3\(5\)

  • Cisco Ip Phone 8861

    HW
    Cisco
    all versions

  • Cisco Ip Phone 8861 Firmware

    OS
    Cisco
    < 11.3\(5\)< 14.1\(1\)

  • Cisco Ip Phone 8865

    HW
    Cisco
    all versions

  • Cisco Ip Phone 8865 Firmware

    OS
    Cisco
    < 14.1\(1\)

  • Cisco Meraki Gr10

    HW
    Cisco
    all versions

  • Cisco Meraki Gr10 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Gr60

    HW
    Cisco
    all versions

  • Cisco Meraki Gr60 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr12

    HW
    Cisco
    all versions

  • Cisco Meraki Mr12 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr18

    HW
    Cisco
    all versions

  • Cisco Meraki Mr18 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr20

    HW
    Cisco
    all versions

  • Cisco Meraki Mr20 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr26

    HW
    Cisco
    all versions

  • Cisco Meraki Mr26 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr30h

    HW
    Cisco
    all versions

  • Cisco Meraki Mr30h Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr32

    HW
    Cisco
    all versions

  • Cisco Meraki Mr32 Firmware

    OS
    Cisco
    < 26.8.3

  • Cisco Meraki Mr33

    HW
    Cisco
    all versions

  • Cisco Meraki Mr33 Firmware

    OS
    Cisco
    < 27.7.1

  • Cisco Meraki Mr34

    HW
    Cisco
    all versions

  • Cisco Meraki Mr34 Firmware

    OS
    Cisco
    < 26.8.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2020-3161CRITICAL9.8⚠ KEVPL ✓same product

RCE i DoS w serwerze HTTP telefonów Cisco IP Phone

CVE-2023-20079CRITICAL9.8PL ✓same product

RCE i DoS w interfejsie webowym telefonów Cisco IP Phone serii 6800

CVE-2023-20078CRITICAL9.8PL ✓same product

RCE i DoS w interfejsie webowym telefonów Cisco IP Phone serii 6800

CVE-2025-20350HIGH7.5same product

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco ...

CVE-2024-20498HIGH8.6same product

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Telew...