PT-2021-3061
CVE-2020-26143
·
Published
2021-05-11
·
Updated
2026-10-09
Description by
CVSS 3.1
6.5
MediumMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ALFA Windows 10 driver version 1030.36.604
Description
An issue exists in the WEP, WPA, WPA2, and WPA3 implementations of the ALFA Windows 10 driver, allowing an adversary to inject arbitrary data frames into a protected Wi-Fi network by accepting fragmented plaintext frames. This is due to insufficient input validation in the driver's implementation of these algorithms. The vulnerability can be exploited to impact the integrity of protected information.
Recommendations
For ALFA Windows 10 driver version 1030.36.604, consider disabling the use of WEP, WPA, WPA2, and WPA3 until a patch is available to prevent exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾