deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-26418
Published: 2021-05-11
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-290
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26418; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26418
CVE: CVE-2021-26419
Published: 2021-05-11
Description: Scripting Engine Memory Corruption Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/162570/Internet-Explorer-jscript9.dll-Memory-Corruption.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26419; http://packetstormsecurity.com/files/162570/Internet-Explorer-jscript9.dll-Memory-Corruption.html
CVE: CVE-2021-26421
Published: 2021-05-11
Description: Skype for Business and Lync Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26421; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26421
CVE: CVE-2021-26422
Published: 2021-05-11
Description: Skype for Business and Lync Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26422; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26422
CVE: CVE-2021-27068
Published: 2021-05-11
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27068; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27068
CVE: CVE-2021-28455
Published: 2021-05-11
Description: Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28455; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28455
CVE: CVE-2021-28461
Published: 2021-05-11
Description: Dynamics Finance and Operations Cross-site Scripting Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28461; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28461
CVE: CVE-2021-28465
Published: 2021-05-11
Description: Web Media Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28465; https://www.zerodayinitiative.com/advisories/ZDI-21-572/; https://www.zerodayinitiative.com/advisories/ZDI-21-579/
CVE: CVE-2021-28474
Published: 2021-05-11
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-436
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28474; https://www.zerodayinitiative.com/advisories/ZDI-21-574/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28474
CVE: CVE-2021-28476
Published: 2021-05-11
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 9.9 (CRITICAL)
References: http://packetstormsecurity.com/files/163497/Microsoft-Hyper-V-vmswitch.sys-Proof-Of-Concept.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28476; http://packetstormsecurity.com/files/163497/Microsoft-Hyper-V-vmswitch.sys-Proof-Of-Concept.html
CVE: CVE-2021-28478
Published: 2021-05-11
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-290
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28478; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28478
CVE: CVE-2021-28479
Published: 2021-05-11
Description: Windows CSC Service Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28479; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28479
CVE: CVE-2021-31165
Published: 2021-05-11
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/162555/Windows-Container-Manager-Service-CmsRpcSrv_CreateContainer-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31165; http://packetstormsecurity.com/files/162555/Windows-Container-Manager-Service-CmsRpcSrv_CreateContainer-Privilege-Escalation.html
CVE: CVE-2021-31166
Published: 2021-05-11
Description: HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/162722/Microsoft-HTTP-Protocol-Stack-Remote-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31166; http://packetstormsecurity.com/files/162722/Microsoft-HTTP-Protocol-Stack-Remote-Code-Execution.html
CVE: CVE-2021-31167
Published: 2021-05-11
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/162559/Windows-Container-Manager-Service-CmsRpcSrv_MapNamedPipeToContainer-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31167; http://packetstormsecurity.com/files/162559/Windows-Container-Manager-Service-CmsRpcSrv_MapNamedPipeToContainer-Privilege-Escalation.html
CVE: CVE-2021-31168
Published: 2021-05-11
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/162556/Windows-Container-Manager-Service-CmsRpcSrv_MapVirtualDiskToContainer-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31168; http://packetstormsecurity.com/files/162556/Windows-Container-Manager-Service-CmsRpcSrv_MapVirtualDiskToContainer-Privilege-Escalation.html
CVE: CVE-2021-31169
Published: 2021-05-11
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/162557/Windows-Container-Manager-Service-Arbitrary-Object-Directory-Creation-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31169; http://packetstormsecurity.com/files/162557/Windows-Container-Manager-Service-Arbitrary-Object-Directory-Creation-Privilege-Escalation.html
CVE: CVE-2021-31170
Published: 2021-05-11
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31170; https://www.zerodayinitiative.com/advisories/ZDI-21-578/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31170
CVE: CVE-2021-31171
Published: 2021-05-11
Description: Microsoft SharePoint Information Disclosure Vulnerability
CVSS Score: 4.1 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31171; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31171
CVE: CVE-2021-31172
Published: 2021-05-11
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-290
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31172; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31172
CVE: CVE-2021-31173
Published: 2021-05-11
Description: Microsoft SharePoint Server Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31173; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31173
CVE: CVE-2021-31174
Published: 2021-05-11
Description: Microsoft Excel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31174; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31174
CVE: CVE-2021-31175
Published: 2021-05-11
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31175; https://www.zerodayinitiative.com/advisories/ZDI-21-580/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31175
CVE: CVE-2021-31176
Published: 2021-05-11
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31176; https://www.zerodayinitiative.com/advisories/ZDI-21-575/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31176
CVE: CVE-2021-31177
Published: 2021-05-11
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31177; https://www.zerodayinitiative.com/advisories/ZDI-21-576/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31177
CVE: CVE-2021-31178
Published: 2021-05-11
Description: Microsoft Office Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-191
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31178; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31178
CVE: CVE-2021-31179
Published: 2021-05-11
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31179; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31179
CVE: CVE-2021-31180
Published: 2021-05-11
Description: Microsoft Office Graphics Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31180; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31180
CVE: CVE-2021-31181
Published: 2021-05-11
Description: Microsoft SharePoint Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/163208/Microsoft-SharePoint-Unsafe-Control-And-ViewState-Remote-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31181; https://www.zerodayinitiative.com/advisories/ZDI-21-573/
CVE: CVE-2021-31182
Published: 2021-05-11
Description: Microsoft Bluetooth Driver Spoofing Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31182; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31182
CVE: CVE-2021-31184
Published: 2021-05-11
Description: Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31184; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31184
CVE: CVE-2021-31185
Published: 2021-05-11
Description: Windows Desktop Bridge Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31185; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31185
CVE: CVE-2021-31186
Published: 2021-05-11
Description: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVSS Score: 7.4 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31186; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31186
CVE: CVE-2021-31187
Published: 2021-05-11
Description: Windows WalletService Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31187; https://www.zerodayinitiative.com/advisories/ZDI-21-571/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31187
CVE: CVE-2021-31188
Published: 2021-05-11
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31188; https://www.zerodayinitiative.com/advisories/ZDI-21-577/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31188
CVE: CVE-2021-31190
Published: 2021-05-11
Description: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31190; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31190
CVE: CVE-2021-31191
Published: 2021-05-11
Description: Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31191; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31191
CVE: CVE-2021-31192
Published: 2021-05-11
Description: Windows Media Foundation Core Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31192; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31192
CVE: CVE-2021-31193
Published: 2021-05-11
Description: Windows SSDP Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31193; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31193
CVE: CVE-2021-31194
Published: 2021-05-11
Description: OLE Automation Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31194; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31194
CVE: CVE-2021-31195
Published: 2021-05-11
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31195; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31195
CVE: CVE-2021-31198
Published: 2021-05-11
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-94
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31198; https://www.zerodayinitiative.com/advisories/ZDI-21-894/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31198
CVE: CVE-2021-31200
Published: 2021-05-11
Description: Common Utilities Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31200; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31200
CVE: CVE-2021-31204
Published: 2021-05-11
Description: .NET and Visual Studio Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/
CVE: CVE-2021-31205
Published: 2021-05-11
Description: Windows SMB Client Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31205; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31205
CVE: CVE-2021-31207
Published: 2021-05-11
Description: Microsoft Exchange Server Security Feature Bypass Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31207; https://www.zerodayinitiative.com/advisories/ZDI-21-819/
CVE: CVE-2021-31208
Published: 2021-05-11
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31208; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31208
CVE: CVE-2021-31209
Published: 2021-05-11
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31209; https://www.zerodayinitiative.com/advisories/ZDI-21-615/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31209
CVE: CVE-2021-31211
Published: 2021-05-11
Description: Visual Studio Code Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31211; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31211
CVE: CVE-2021-31213
Published: 2021-05-11
Description: Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31213; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31213
CVE: CVE-2021-31214
Published: 2021-05-11
Description: Visual Studio Code Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31214; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31214
CVE: CVE-2021-31936
Published: 2021-05-11
Description: Microsoft Accessibility Insights for Web Information Disclosure Vulnerability
CVSS Score: 7.4 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31936; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31936
CVE: CVE-2020-24586
Published: 2021-05-11
Description: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.
CVSS Score: 3.5 (LOW)
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE: CVE-2020-24587
Published: 2021-05-11
Description: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.
CVSS Score: 2.6 (LOW)
CWE: CWE-327
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE: CVE-2020-24588
Published: 2021-05-11
Description: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
CVSS Score: 3.5 (LOW)
CWE: CWE-327
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
CVE: CVE-2020-26139
Published: 2021-05-11
Description: An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
CVE: CVE-2020-26140
Published: 2021-05-11
Description: An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
CVE: CVE-2020-26141
Published: 2021-05-11
Description: An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-354
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
CVE: CVE-2020-26142
Published: 2021-05-11
Description: An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
CVE: CVE-2020-26143
Published: 2021-05-11
Description: An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2021/05/11/12; https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf; https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md