CVE-2020-26140

Description by

CVSS 3.1

6.5

Medium

MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ALFA Windows 10 driver version 6.1316.1209 for AWUS036H

Description An issue was discovered in the ALFA Windows 10 driver where the WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. This allows an adversary to inject arbitrary data frames independent of the network configuration.

Recommendations For ALFA Windows 10 driver version 6.1316.1209, consider disabling the use of WEP, WPA, WPA2, and WPA3 until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vendors