CVE-2020-24588 in Microsoft Windows

요약 (영어)

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

책임이 있는

MITRE

예약하다

2020. 08. 21.

공개

2021. 05. 12.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
174874	Microsoft Windows Wireless Networking		입증되지 않음	공식 수정	CVE-2020-24588