The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| ieee | ieee_802.11 | - | - |
| linux | mac80211 | - | - |
| microsoft | windows_10 | - |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
206
Affected Products
20
References
ieee / ieee_802.11
| - |
| microsoft | windows_10 | - | - |
| microsoft | windows_10 | - | - |
| microsoft | windows_10 | - | - |
| microsoft | windows_10 | - | - |
| microsoft | windows_10 | - | - |
| microsoft | windows_10 | - | - |
| microsoft | windows_7 | - | - |
| microsoft | windows_8.1 | - | - |
| microsoft | windows_rt_8.1 | - | - |
| microsoft | windows_server_2008 | - | - |
| microsoft | windows_server_2008 | - | - |
| microsoft | windows_server_2012 | - | - |
| microsoft | windows_server_2012 | - | - |
| microsoft | windows_server_2016 | - | - |
| microsoft | windows_server_2016 | - | - |
| microsoft | windows_server_2019 | - | - |
| debian | debian_linux | - | - |
| siemens | scalance_w1748-1_firmware | - | - |
| siemens | scalance_w1750d_firmware | - | - |
| siemens | scalance_w1788-1_firmware | - | - |
| siemens | scalance_w1788-2_firmware | - | - |
| siemens | scalance_w1788-2_firmware | - | - |
| siemens | scalance_w1788-2ia_firmware | - | - |
| siemens | scalance_w721-1_firmware | - | - |
| siemens | scalance_w722-1_firmware | - | - |
| siemens | scalance_w734-1_firmware | - | - |
| siemens | scalance_w738-1_firmware | - | - |
| siemens | scalance_w748-1_firmware | - | - |
| siemens | scalance_w748-1_firmware | - | - |
| siemens | scalance_w761-1_firmware | - | - |
| siemens | scalance_w774-1_firmware | - | - |
| siemens | scalance_w774-1_firmware | - | - |
| siemens | scalance_w778-1_firmware | - | - |
| siemens | scalance_w778-1_firmware | - | - |
| siemens | scalance_w786-1_firmware | - | - |
| siemens | scalance_w786-2_firmware | - | - |
| siemens | scalance_w786-2_firmware | - | - |
| siemens | scalance_w786-2ia_firmware | - | - |
| siemens | scalance_w788-1_firmware | - | - |
| siemens | scalance_w788-1_firmware | - | - |
| siemens | scalance_w788-2_firmware | - | - |
| siemens | scalance_w788-2_firmware | - | - |
| siemens | scalance_w788-2_firmware | - | - |
| siemens | scalance_wam763-1_firmware | - | - |
| siemens | scalance_wam766-1_firmware | - | - |
| siemens | scalance_wam766-1_firmware | - | - |
| siemens | scalance_wam766-1_6ghz_firmware | - | - |
| siemens | scalance_wam766-1_6ghz_firmware | - | - |
| siemens | scalance_wum763-1_firmware | - | - |
| siemens | scalance_wum766-1_firmware | - | - |
| siemens | scalance_wum766-1_6ghz_firmware | - | - |
| arista | c-100_firmware | - | - |
| arista | c-110_firmware | - | - |
| arista | c-120_firmware | - | - |
| arista | c-130_firmware | - | - |
| arista | c-200_firmware | - | - |
| arista | c-230_firmware | - | - |
| arista | c-235_firmware | - | - |
| arista | c-250_firmware | - | - |
| arista | c-260_firmware | - | - |
| arista | c-65_firmware | - | - |
| arista | c-75_firmware | - | - |
| arista | o-105_firmware | - | - |
| arista | o-90_firmware | - | - |
| arista | w-118_firmware | - | - |
| arista | w-68_firmware | - | - |
| cisco | 1100_firmware | - | - |
| cisco | 1100-4p_firmware | - | - |
| cisco | 1100-8p_firmware | - | - |
| cisco | 1101-4p_firmware | - | - |
| cisco | 1109-2p_firmware | - | - |
| cisco | 1109-4p_firmware | - | - |
| cisco | aironet_1532_firmware | - | - |
| cisco | aironet_1542d_firmware | - | - |
| cisco | aironet_1542i_firmware | - | - |
| cisco | aironet_1800_firmware | - | - |
| cisco | aironet_1800i_firmware | - | - |
| cisco | aironet_1810_firmware | - | - |
| cisco | aironet_1810w_firmware | - | - |
| cisco | aironet_1815_firmware | - | - |
| cisco | aironet_1815i_firmware | - | - |
| cisco | aironet_1832_firmware | - | - |
| cisco | aironet_1842_firmware | - | - |
| cisco | aironet_1852_firmware | - | - |
| cisco | aironet_ap803_firmware | - | - |
| cisco | aironet_iw3702_firmware | - | - |
| cisco | catalyst_9105_firmware | - | - |
| cisco | catalyst_9105axi_firmware | - | - |
| cisco | catalyst_9105axw_firmware | - | - |
| cisco | catalyst_9115_firmware | - | - |
| cisco | catalyst_9115_ap_firmware | - | - |
| cisco | catalyst_9115axe_firmware | - | - |
| cisco | catalyst_9115axi_firmware | - | - |
| cisco | catalyst_9117_firmware | - | - |
| cisco | catalyst_9117_ap_firmware | - | - |
| cisco | catalyst_9117axi_firmware | - | - |
| cisco | catalyst_9120_firmware | - | - |
| cisco | catalyst_9120_ap_firmware | - | - |
| cisco | catalyst_9120axe_firmware | - | - |
| cisco | catalyst_9120axi_firmware | - | - |
| cisco | catalyst_9120axp_firmware | - | - |
| cisco | catalyst_9124_firmware | - | - |
| cisco | catalyst_9124axd_firmware | - | - |
| cisco | catalyst_9124axi_firmware | - | - |
| cisco | catalyst_9130_firmware | - | - |
| cisco | catalyst_9130_ap_firmware | - | - |
| cisco | catalyst_9130axe_firmware | - | - |
| cisco | catalyst_9130axi_firmware | - | - |
| cisco | ip_phone_6861_firmware | - | - |
| cisco | ip_phone_8821_firmware | - | - |
| cisco | ip_phone_8832_firmware | - | - |
| cisco | ip_phone_8861_firmware | - | - |
| cisco | ip_phone_8865_firmware | - | - |
| cisco | ir829-2lte-ea-ak9_firmware | - | - |
| cisco | ir829-2lte-ea-bk9_firmware | - | - |
| cisco | ir829-2lte-ea-ek9_firmware | - | - |
| cisco | ir829gw-lte-ga-ck9_firmware | - | - |
| cisco | ir829gw-lte-ga-ek9_firmware | - | - |
| cisco | ir829gw-lte-ga-sk9_firmware | - | - |
| cisco | ir829gw-lte-ga-zk9_firmware | - | - |
| cisco | ir829gw-lte-na-ak9_firmware | - | - |
| cisco | ir829gw-lte-vz-ak9_firmware | - | - |
| cisco | meraki_gr10_firmware | - | - |
| cisco | meraki_gr60_firmware | - | - |
| cisco | meraki_mr12_firmware | - | - |
| cisco | meraki_mr20_firmware | - | - |
| cisco | meraki_mr26_firmware | - | - |
| cisco | meraki_mr30h_firmware | - | - |
| cisco | meraki_mr32_firmware | - | - |
| cisco | meraki_mr33_firmware | - | - |
| cisco | meraki_mr34_firmware | - | - |
| cisco | meraki_mr36_firmware | - | - |
| cisco | meraki_mr42_firmware | - | - |
| cisco | meraki_mr42e_firmware | - | - |
| cisco | meraki_mr44_firmware | - | - |
| cisco | meraki_mr45_firmware | - | - |
| cisco | meraki_mr46_firmware | - | - |
| cisco | meraki_mr46e_firmware | - | - |
| cisco | meraki_mr52_firmware | - | - |
| cisco | meraki_mr53_firmware | - | - |
| cisco | meraki_mr53e_firmware | - | - |
| cisco | meraki_mr55_firmware | - | - |
| cisco | meraki_mr56_firmware | - | - |
| cisco | meraki_mr62_firmware | - | - |
| cisco | meraki_mr66_firmware | - | - |
| cisco | meraki_mr70_firmware | - | - |
| cisco | meraki_mr72_firmware | - | - |
| cisco | meraki_mr74_firmware | - | - |
| cisco | meraki_mr76_firmware | - | - |
| cisco | meraki_mr84_firmware | - | - |
| cisco | meraki_mr86_firmware | - | - |
| cisco | meraki_mx64w_firmware | - | - |
| cisco | meraki_mx65w_firmware | - | - |
| cisco | meraki_mx67cw_firmware | - | - |
| cisco | meraki_mx67w_firmware | - | - |
| cisco | meraki_mx68cw_firmware | - | - |
| cisco | meraki_mx68w_firmware | - | - |
| cisco | meraki_z3_firmware | - | - |
| cisco | meraki_z3c_firmware | - | - |
| cisco | webex_board_55_firmware | - | - |
| cisco | webex_board_55s_firmware | - | - |
| cisco | webex_board_70_firmware | - | - |
| cisco | webex_board_70s_firmware | - | - |
| cisco | webex_board_85s_firmware | - | - |
| cisco | webex_dx70_firmware | - | - |
| cisco | webex_dx80_firmware | - | - |
| cisco | webex_room_55_firmware | - | - |
| cisco | webex_room_55_dual_firmware | - | - |
| cisco | webex_room_70_firmware | - | - |
| cisco | webex_room_70_dual_firmware | - | - |
| cisco | webex_room_70_dual_g2_firmware | - | - |
| cisco | webex_room_70_single_firmware | - | - |
| cisco | webex_room_70_single_g2_firmware | - | - |
| cisco | webex_room_kit_firmware | - | - |
| cisco | webex_room_kit_mini_firmware | - | - |
| intel | ac_8260_firmware | - | - |
| intel | ac_8265_firmware | - | - |
| intel | ac_9260_firmware | - | - |
| intel | ac_9560_firmware | - | - |
| intel | killer_ac_1550_firmware | - | - |
| intel | killer_wi-fi_6_ax1650_firmware | - | - |
| intel | killer_wi-fi_6e_ax1675_firmware | - | - |
| intel | proset_ac_3165_firmware | - | - |
| intel | proset_ac_3168_firmware | - | - |
| intel | proset_ac_8260_firmware | - | - |
| intel | proset_ac_8265_firmware | - | - |
| intel | proset_ac_9260_firmware | - | - |
| intel | proset_ac_9461_firmware | - | - |
| intel | proset_ac_9462_firmware | - | - |
| intel | proset_ac_9560_firmware | - | - |
| intel | proset_wi-fi_6_ax200_firmware | - | - |
| intel | proset_wi-fi_6_ax201_firmware | - | - |
| intel | proset_wi-fi_6e_ax210_firmware | - | - |
| intel | proset_wireless_7265_\(rev_d\)_firmware | - | - |
| intel | wi-fi_6_ax200_firmware | - | - |
| intel | wi-fi_6_ax201_firmware | - | - |
| linux | linux_kernel | 4.4.0 - 4.4.271 | - |
| linux | linux_kernel | 4.9.0 - 4.9.271 | - |
| linux | linux_kernel | 4.14 - 4.14.235 | - |
| linux | linux_kernel | 4.19 - 4.19.193 | - |
| linux | linux_kernel | 5.4 - 5.4.124 | - |
| linux | linux_kernel | 5.10 - 5.10.42 | - |
| linux | linux_kernel | 5.12 - 5.12.9 | - |
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability
Impact