Back
CVE-2020-24587
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that…
Low2.6EPSS 2.6%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Low2.6 | CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N |
- EPSS (exploitation in 30 days)
- 2.6% · top 15% of all CVEs (7 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.6.
Weakness
Affected products
n/a
- affected n/a
References (9)
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html (opens in a new tab)x_transferred
- 20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021 (opens in a new tab)vendor-advisoryx_transferred
- https://www.fragattacks.com (opens in a new tab)x_transferred
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md (opens in a new tab)x_transferred
- [oss-security] 20210511 various 802.11 security issues - fragattacks.com (opens in a new tab)mailing-listx_transferred
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update (opens in a new tab)mailing-listx_transferred
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update (opens in a new tab)mailing-listx_transferred
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 (opens in a new tab)x_transferred
- [debian-lts-announce] 20230401 [SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10) (opens in a new tab)mailing-listx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2020-24587)Record last updated .