{"id":"CVE-2020-24588","published":"2021-05-11T00:00:00Z","modified":"2026-04-14T08:48:59Z","title":"The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP)…","vendor":null,"product":null,"tier":"tail","description":{"text":"The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.03611,"percentile":0.89445,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html","tags":[]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu","tags":["vendor-advisory"]},{"url":"https://www.fragattacks.com","tags":[]},{"url":"https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/12","tags":["mailing-list"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html","tags":["mailing-list"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html","tags":["mailing-list"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf","tags":[]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63","tags":[]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html","tags":["mailing-list"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-913875.html","tags":[]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019200.html","tags":[]}],"priority":{"score":17.9,"factors":[{"name":"EPSS percentile","points":17.89}]},"euvd":{"id":"EUVD-2020-17305","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-linux-cve-2020-24588","children":[{"from":"CVE-2020-24588","to":"CVE-2025-27558","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incorrect fix for CVE-2020-24588.","from":"CVE.org","in":"CVE-2025-27558"}]},{"from":"CVE-2020-24588","to":"CVE-2025-38512","relation":"variant","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"variant","quote":"It can be considered a variant of CVE-2020-24588 but for mesh networks.","from":"CVE.org","in":"CVE-2025-38512"}]}]}}