CVE-2020-24586
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that…
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.
Timeline
ID reserved
By mitre
- 9 months later
· 9 months later
Published
- 3 years later
· 3 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Low3.5 | CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
- EPSS (exploitation in 30 days)
- 5.8% · top 6.9% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.5.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (9)
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html (opens in a new tab)x_transferred
- 20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021 (opens in a new tab)vendor-advisoryx_transferred
- https://www.fragattacks.com (opens in a new tab)x_transferred
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md (opens in a new tab)x_transferred
- [oss-security] 20210511 various 802.11 security issues - fragattacks.com (opens in a new tab)mailing-listx_transferred
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update (opens in a new tab)mailing-listx_transferred
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update (opens in a new tab)mailing-listx_transferred
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 (opens in a new tab)x_transferred
- [debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10) (opens in a new tab)mailing-listx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2020-24586)Record last updated .