CVE-2020-24586 vulnerability in Ieee and Other Products
Published on May 11, 2021
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.
Products Associated with CVE-2020-24586
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-24586 are published in these products:
Exploit Probability
EPSS
0.54%
Percentile
67.14%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.