Auth bypass in Arista C-100
CVE-2020-26139
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.065 (93.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 93.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.065 · newest: 0.065 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf… (vendor-advisory, Third Party Advisory)
- www.fragattacks.com (Third Party Advisory)
- github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md (Third Party Advisory)
- www.openwall.com/lists/oss-security/2021/05/11/12 (mailing-list, Mailing List, Third Party Advisory)
- lists.debian.org/debian-lts-announce/2021/06/msg00020.html (mailing-list, Mailing List, Third Party Advisory)
- lists.debian.org/debian-lts-announce/2021/06/msg00019.html (mailing-list, Mailing List, Third Party Advisory)
- cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf (Patch, Third Party Advisory)
- www.arista.com/en/support/advisories-notices/security-advisories/12602-security… (Third Party Advisory)
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
- 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Frequently asked questions
- What is CVE-2020-26139?
- CVE-2020-26139 is a medium-severity vulnerability in Arista C-100, classified under Improper Authentication. CVSS score: 5.3/10. Published 2021-05-11.
- How severe is CVE-2020-26139?
- Medium severity. CVSS v3 base score is 5.3 out of 10.
- Is CVE-2020-26139 known to be exploited?
- 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.