ac_9560_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ac_9560_firmware/ Sun, 26 Feb 2023 06:40:04 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png ac_9560_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ac_9560_firmware/ 32 32 CVE-2020-26558 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26558/ Sun, 26 Feb 2023 06:40:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26558/ Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the […]

The post CVE-2020-26558 appeared first on CVE Vulnerability.

]]> Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.

The post CVE-2020-26558 appeared first on CVE Vulnerability.

]]> CVE-2020-26555 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26555/ Sun, 26 Feb 2023 06:40:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26555/ Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.

The post CVE-2020-26555 appeared first on CVE Vulnerability.

]]> Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.

The post CVE-2020-26555 appeared first on CVE Vulnerability.

]]> CVE-2020-26140 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26140/ Sun, 26 Feb 2023 06:39:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26140/ An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

The post CVE-2020-26140 appeared first on CVE Vulnerability.

]]> An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

The post CVE-2020-26140 appeared first on CVE Vulnerability.

]]> CVE-2020-26139 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26139/ Sun, 26 Feb 2023 06:39:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26139/ An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities […]

The post CVE-2020-26139 appeared first on CVE Vulnerability.

]]> An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

The post CVE-2020-26139 appeared first on CVE Vulnerability.

]]> CVE-2020-24588 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24588/ Sun, 26 Feb 2023 06:39:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24588/ The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network […]

The post CVE-2020-24588 appeared first on CVE Vulnerability.

]]> The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

The post CVE-2020-24588 appeared first on CVE Vulnerability.

]]> CVE-2020-24587 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24587/ Sun, 26 Feb 2023 06:39:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24587/ The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is […]

The post CVE-2020-24587 appeared first on CVE Vulnerability.

]]> The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

The post CVE-2020-24587 appeared first on CVE Vulnerability.

]]> CVE-2020-24586 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24586/ Sun, 26 Feb 2023 06:39:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24586/ The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network […]

The post CVE-2020-24586 appeared first on CVE Vulnerability.

]]> The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn’t require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

The post CVE-2020-24586 appeared first on CVE Vulnerability.

]]> CVE-2020-0569 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-0569/ Sun, 26 Feb 2023 06:35:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-0569/ Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

The post CVE-2020-0569 appeared first on CVE Vulnerability.

]]> Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.

The post CVE-2020-0569 appeared first on CVE Vulnerability.

]]> CVE-2020-0559 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-0559/ Sun, 26 Feb 2023 06:35:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-0559/ Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

The post CVE-2020-0559 appeared first on CVE Vulnerability.

]]> Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows* 7 and 8.1 before version 21.40.5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

The post CVE-2020-0559 appeared first on CVE Vulnerability.

]]> CVE-2021-33155 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-33155/ Thu, 23 Feb 2023 14:09:57 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-33155/ Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.

The post CVE-2021-33155 appeared first on CVE Vulnerability.

]]> Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access.

The post CVE-2021-33155 appeared first on CVE Vulnerability.

]]>