Back to CVE records
Medium 6.5Published May 11, 2021
CVE-2020-26140An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H.
Updated under an hour ago ()
Does this affect you?
It affects Siemens SCALANCE W721-1 RJ45 and 59 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
- CVSS
- 6.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- mitre
- NVD analysis
- Modified
- Record last updated
- Oct 8, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Siemens SCALANCE W721-1 RJ45 siemens:scalance_w721_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W722-1 RJ45 siemens:scalance_w722_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W734-1 RJ45 siemens:scalance_w734_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W734-1 RJ45 (USA) siemens:scalance_w734_1_rj45_usa (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W738-1 M12 siemens:scalance_w738_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W748-1 M12 siemens:scalance_w748_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W748-1 RJ45 siemens:scalance_w748_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W761-1 RJ45 siemens:scalance_w761_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W774-1 M12 EEC siemens:scalance_w774_1_m12_eec (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W774-1 RJ45 siemens:scalance_w774_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W774-1 RJ45 (USA) siemens:scalance_w774_1_rj45_usa (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W778-1 M12 siemens:scalance_w778_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W778-1 M12 EEC siemens:scalance_w778_1_m12_eec (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W778-1 M12 EEC (USA) siemens:scalance_w778_1_m12_eec_usa (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-1 RJ45 siemens:scalance_w786_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-2 RJ45 siemens:scalance_w786_2_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-2 SFP siemens:scalance_w786_2_sfp (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-2IA RJ45 siemens:scalance_w786_2ia_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-1 M12 siemens:scalance_w788_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-1 RJ45 siemens:scalance_w788_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-2 M12 siemens:scalance_w788_2_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-2 M12 EEC siemens:scalance_w788_2_m12_eec (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-2 RJ45 siemens:scalance_w788_2_rj45 (from the name) | before V6.6.0 | CISA ADP |
alfa awus036h_firmware alfa:awus036h_firmware | 6.1316.1209 | NVD |
siemens scalance_w1748-1_firmware siemens:scalance_w1748-1_firmware | all versions | NVD |
siemens scalance_w1750d_firmware siemens:scalance_w1750d_firmware | all versions | NVD |
siemens scalance_w1788-1_firmware siemens:scalance_w1788-1_firmware | all versions | NVD |
siemens scalance_w1788-2_firmware siemens:scalance_w1788-2_firmware | all versions; all versions | NVD |
siemens scalance_w1788-2ia_firmware siemens:scalance_w1788-2ia_firmware | all versions | NVD |
siemens scalance_w721-1_firmware siemens:scalance_w721-1_firmware | all versions | NVD |
siemens scalance_w722-1_firmware siemens:scalance_w722-1_firmware | all versions | NVD |
siemens scalance_w734-1_firmware siemens:scalance_w734-1_firmware | all versions | NVD |
siemens scalance_w738-1_firmware siemens:scalance_w738-1_firmware | all versions | NVD |
siemens scalance_w748-1_firmware siemens:scalance_w748-1_firmware | all versions; all versions | NVD |
siemens scalance_w761-1_firmware siemens:scalance_w761-1_firmware | all versions | NVD |
siemens scalance_w774-1_firmware siemens:scalance_w774-1_firmware | all versions; all versions | NVD |
siemens scalance_w778-1_firmware siemens:scalance_w778-1_firmware | all versions; all versions | NVD |
siemens scalance_w786-1_firmware siemens:scalance_w786-1_firmware | all versions | NVD |
siemens scalance_w786-2_firmware siemens:scalance_w786-2_firmware | all versions; all versions | NVD |
siemens scalance_w786-2ia_firmware siemens:scalance_w786-2ia_firmware | all versions | NVD |
siemens scalance_w788-1_firmware siemens:scalance_w788-1_firmware | all versions; all versions | NVD |
siemens scalance_w788-2_firmware siemens:scalance_w788-2_firmware | all versions; all versions; all versions | NVD |
siemens scalance_wam763-1_firmware siemens:scalance_wam763-1_firmware | all versions | NVD |
siemens scalance_wam766-1_firmware siemens:scalance_wam766-1_firmware | all versions; all versions | NVD |
siemens scalance_wam766-1_6ghz_firmware siemens:scalance_wam766-1_6ghz_firmware | all versions; all versions | NVD |
siemens scalance_wum763-1_firmware siemens:scalance_wum763-1_firmware | all versions | NVD |
siemens scalance_wum766-1_firmware siemens:scalance_wum766-1_firmware | all versions | NVD |
siemens scalance_wum766-1_6ghz_firmware siemens:scalance_wum766-1_6ghz_firmware | all versions | NVD |
arista c-100_firmware arista:c-100_firmware | all versions | NVD |
arista c-110_firmware arista:c-110_firmware | all versions | NVD |
arista c-120_firmware arista:c-120_firmware | all versions | NVD |
arista c-130_firmware arista:c-130_firmware | all versions | NVD |
arista c-200_firmware arista:c-200_firmware | all versions | NVD |
arista c-230_firmware arista:c-230_firmware | all versions | NVD |
arista c-235_firmware arista:c-235_firmware | all versions | NVD |
arista c-250_firmware arista:c-250_firmware | all versions | NVD |
arista c-260_firmware arista:c-260_firmware | all versions | NVD |
arista c-65_firmware arista:c-65_firmware | all versions | NVD |
arista c-75_firmware arista:c-75_firmware | all versions | NVD |
arista o-105_firmware arista:o-105_firmware | all versions | NVD |
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuvendor-advisory, x-refsource-cisco
- https://www.fragattacks.comx-refsource-misc
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdx-refsource-misc
- http://www.openwall.com/lists/oss-security/2021/05/11/12mailing-list, x-refsource-mlist
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfx-refsource-confirm
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63x-refsource-misc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.