Medium · published May 12, 2021
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.
| Product | Versions | Fixed in |
|---|---|---|
| alfa/awus036h_firmware | all versions | — |
| siemens/scalance_w1748-1_firmware | all versions | — |
| siemens/scalance_w1750d_firmware | all versions | — |
| siemens/scalance_w1788-1_firmware | all versions | — |
| siemens/scalance_w1788-2_firmware | all versions | — |
| siemens/scalance_w1788-2_firmware | all versions | — |
| siemens/scalance_w1788-2ia_firmware | all versions | — |
| siemens/scalance_w721-1_firmware | all versions | — |
| siemens/scalance_w722-1_firmware | all versions | — |
| siemens/scalance_w734-1_firmware | all versions | — |
| siemens/scalance_w738-1_firmware | all versions | — |
| siemens/scalance_w748-1_firmware | all versions | — |
| siemens/scalance_w748-1_firmware | all versions | — |
| siemens/scalance_w761-1_firmware | all versions | — |
| siemens/scalance_w774-1_firmware | all versions | — |
| siemens/scalance_w774-1_firmware | all versions | — |
| siemens/scalance_w778-1_firmware | all versions | — |
| siemens/scalance_w778-1_firmware | all versions | — |
| siemens/scalance_w786-1_firmware | all versions | — |
| siemens/scalance_w786-2_firmware | all versions | — |
| siemens/scalance_w786-2_firmware | all versions | — |
| siemens/scalance_w786-2ia_firmware | all versions | — |
| siemens/scalance_w788-1_firmware | all versions | — |
| siemens/scalance_w788-1_firmware | all versions | — |
| siemens/scalance_w788-2_firmware | all versions | — |
| siemens/scalance_w788-2_firmware | all versions | — |
| siemens/scalance_w788-2_firmware | all versions | — |
| siemens/scalance_wam763-1_firmware | all versions | — |
| siemens/scalance_wam766-1_firmware | all versions | — |
| siemens/scalance_wam766-1_firmware | all versions | — |
| siemens/scalance_wam766-1_6ghz_firmware | all versions | — |
| siemens/scalance_wam766-1_6ghz_firmware | all versions | — |
| siemens/scalance_wum763-1_firmware | all versions | — |
| siemens/scalance_wum766-1_firmware | all versions | — |
| siemens/scalance_wum766-1_6ghz_firmware | all versions | — |
| arista/c-100_firmware | all versions | — |
| arista/c-110_firmware | all versions | — |
| arista/c-120_firmware | all versions | — |
| arista/c-130_firmware | all versions | — |
| arista/c-200_firmware | all versions | — |
| arista/c-230_firmware | all versions | — |
| arista/c-235_firmware | all versions | — |
| arista/c-250_firmware | all versions | — |
| arista/c-260_firmware | all versions | — |
| arista/c-65_firmware | all versions | — |
| arista/c-75_firmware | all versions | — |
| arista/o-105_firmware | all versions | — |
| arista/o-90_firmware | all versions | — |
| arista/w-118_firmware | all versions | — |
| arista/w-68_firmware | all versions | — |
| cisco/1100_firmware | all versions | — |
| cisco/1100-4p_firmware | all versions | — |
| cisco/1100-8p_firmware | all versions | — |
| cisco/1101-4p_firmware | all versions | — |
| cisco/1109-2p_firmware | all versions | — |
| cisco/1109-4p_firmware | all versions | — |
| cisco/aironet_1532_firmware | all versions | — |
| cisco/aironet_1542d_firmware | all versions | — |
| cisco/aironet_1542i_firmware | all versions | — |
| cisco/aironet_1552_firmware | all versions | — |
| cisco/aironet_1552h_firmware | all versions | — |
| cisco/aironet_1560_firmware | all versions | — |
| cisco/aironet_1562d_firmware | all versions | — |
| cisco/aironet_1562e_firmware | all versions | — |
| cisco/aironet_1562i_firmware | all versions | — |
| cisco/aironet_1572_firmware | all versions | — |
| cisco/aironet_1702_firmware | all versions | — |
| cisco/aironet_1800_firmware | all versions | — |
| cisco/aironet_1800i_firmware | all versions | — |
| cisco/aironet_1810_firmware | all versions | — |
| cisco/aironet_1810w_firmware | all versions | — |
| cisco/aironet_1815_firmware | all versions | — |
| cisco/aironet_1815i_firmware | all versions | — |
| cisco/aironet_1832_firmware | all versions | — |
| cisco/aironet_1842_firmware | all versions | — |
| cisco/aironet_1852_firmware | all versions | — |
| cisco/aironet_2702_firmware | all versions | — |
| cisco/aironet_2800_firmware | all versions | — |
| cisco/aironet_2800e_firmware | all versions | — |
| cisco/aironet_2800i_firmware | all versions | — |
| cisco/aironet_3702_firmware | all versions | — |
| cisco/aironet_3800_firmware | all versions | — |
| cisco/aironet_3800e_firmware | all versions | — |
| cisco/aironet_3800i_firmware | all versions | — |
| cisco/aironet_3800p_firmware | all versions | — |
| cisco/aironet_4800_firmware | all versions | — |
| cisco/aironet_ap803_firmware | all versions | — |
| cisco/aironet_iw3702_firmware | all versions | — |
| cisco/catalyst_9105_firmware | all versions | — |
| cisco/catalyst_9105axi_firmware | all versions | — |
| cisco/catalyst_9105axw_firmware | all versions | — |
| cisco/catalyst_9115_firmware | all versions | — |
| cisco/catalyst_9115_ap_firmware | all versions | — |
| cisco/catalyst_9115axe_firmware | all versions | — |
| cisco/catalyst_9115axi_firmware | all versions | — |
| cisco/catalyst_9117_firmware | all versions | — |
| cisco/catalyst_9117_ap_firmware | all versions | — |
| cisco/catalyst_9117axi_firmware | all versions | — |
| cisco/catalyst_9120_firmware | all versions | — |
| cisco/catalyst_9120_ap_firmware | all versions | — |
| cisco/catalyst_9120axe_firmware | all versions | — |
| cisco/catalyst_9120axi_firmware | all versions | — |
| cisco/catalyst_9120axp_firmware | all versions | — |
| cisco/catalyst_9124_firmware | all versions | — |
| cisco/catalyst_9124axd_firmware | all versions | — |
| cisco/catalyst_9124axi_firmware | all versions | — |
| cisco/catalyst_9130_firmware | all versions | — |
| cisco/catalyst_9130_ap_firmware | all versions | — |
| cisco/catalyst_9130axe_firmware | all versions | — |
| cisco/catalyst_9130axi_firmware | all versions | — |
| cisco/catalyst_iw6300_firmware | all versions | — |
| cisco/catalyst_iw6300_ac_firmware | all versions | — |
| cisco/catalyst_iw6300_dc_firmware | all versions | — |
| cisco/catalyst_iw6300_dcw_firmware | all versions | — |
| cisco/esw-6300-con-x-k9_firmware | all versions | — |
| cisco/esw6300_firmware | all versions | — |
| cisco/ip_phone_6861_firmware | all versions | — |
| cisco/ip_phone_8821_firmware | all versions | — |
| cisco/ip_phone_8832_firmware | all versions | — |
| cisco/ip_phone_8861_firmware | all versions | — |
| cisco/ip_phone_8865_firmware | all versions | — |
| cisco/ir829-2lte-ea-ak9_firmware | all versions | — |
| cisco/ir829-2lte-ea-bk9_firmware | all versions | — |
| cisco/ir829-2lte-ea-ek9_firmware | all versions | — |
| cisco/ir829gw-lte-ga-ck9_firmware | all versions | — |
| cisco/ir829gw-lte-ga-ek9_firmware | all versions | — |
| cisco/ir829gw-lte-ga-sk9_firmware | all versions | — |
| cisco/ir829gw-lte-ga-zk9_firmware | all versions | — |
| cisco/ir829gw-lte-na-ak9_firmware | all versions | — |
| cisco/ir829gw-lte-vz-ak9_firmware | all versions | — |
| cisco/meraki_gr10_firmware | all versions | — |
| cisco/meraki_gr60_firmware | all versions | — |
| cisco/meraki_mr12_firmware | all versions | — |
| cisco/meraki_mr20_firmware | all versions | — |
| cisco/meraki_mr26_firmware | all versions | — |
| cisco/meraki_mr30h_firmware | all versions | — |
| cisco/meraki_mr32_firmware | all versions | — |
| cisco/meraki_mr33_firmware | all versions | — |
| cisco/meraki_mr34_firmware | all versions | — |
| cisco/meraki_mr36_firmware | all versions | — |
| cisco/meraki_mr42_firmware | all versions | — |
| cisco/meraki_mr42e_firmware | all versions | — |
| cisco/meraki_mr44_firmware | all versions | — |
| cisco/meraki_mr45_firmware | all versions | — |
| cisco/meraki_mr46_firmware | all versions | — |
| cisco/meraki_mr46e_firmware | all versions | — |
| cisco/meraki_mr52_firmware | all versions | — |
| cisco/meraki_mr53_firmware | all versions | — |
| cisco/meraki_mr53e_firmware | all versions | — |
| cisco/meraki_mr55_firmware | all versions | — |
| cisco/meraki_mr56_firmware | all versions | — |
| cisco/meraki_mr62_firmware | all versions | — |
| cisco/meraki_mr66_firmware | all versions | — |
| cisco/meraki_mr70_firmware | all versions | — |
| cisco/meraki_mr72_firmware | all versions | — |
| cisco/meraki_mr74_firmware | all versions | — |
| cisco/meraki_mr76_firmware | all versions | — |
| cisco/meraki_mr84_firmware | all versions | — |
| cisco/meraki_mr86_firmware | all versions | — |
| cisco/meraki_mx64w_firmware | all versions | — |
| cisco/meraki_mx65w_firmware | all versions | — |
| cisco/meraki_mx67cw_firmware | all versions | — |
| cisco/meraki_mx67w_firmware | all versions | — |
| cisco/meraki_mx68cw_firmware | all versions | — |
| cisco/meraki_mx68w_firmware | all versions | — |
| cisco/meraki_z3_firmware | all versions | — |
| cisco/meraki_z3c_firmware | all versions | — |
| cisco/webex_board_55_firmware | all versions | — |
| cisco/webex_board_55s_firmware | all versions | — |
| cisco/webex_board_70_firmware | all versions | — |
| cisco/webex_board_70s_firmware | all versions | — |
| cisco/webex_board_85s_firmware | all versions | — |
| cisco/webex_dx70_firmware | all versions | — |
| cisco/webex_dx80_firmware | all versions | — |
| cisco/webex_room_55_firmware | all versions | — |
| cisco/webex_room_55_dual_firmware | all versions | — |
| cisco/webex_room_70_firmware | all versions | — |
| cisco/webex_room_70_dual_firmware | all versions | — |
| cisco/webex_room_70_dual_g2_firmware | all versions | — |
| cisco/webex_room_70_single_firmware | all versions | — |
| cisco/webex_room_70_single_g2_firmware | all versions | — |
| cisco/webex_room_kit_firmware | all versions | — |
| cisco/webex_room_kit_mini_firmware | all versions | — |
| intel/ac_8260_firmware | all versions | — |
| intel/ac_8265_firmware | all versions | — |
| intel/ac_9260_firmware | all versions | — |
| intel/ac_9560_firmware | all versions | — |
| intel/killer_ac_1550_firmware | all versions | — |
| intel/killer_wi-fi_6_ax1650_firmware | all versions | — |
| intel/killer_wi-fi_6e_ax1675_firmware | all versions | — |
| intel/proset_ac_3165_firmware | all versions | — |
| intel/proset_ac_3168_firmware | all versions | — |
| intel/proset_ac_8260_firmware | all versions | — |
| intel/proset_ac_8265_firmware | all versions | — |
| intel/proset_ac_9260_firmware | all versions | — |
| intel/proset_ac_9461_firmware | all versions | — |
| intel/proset_ac_9462_firmware | all versions | — |
| intel/proset_ac_9560_firmware | all versions | — |
| intel/proset_wi-fi_6_ax200_firmware | all versions | — |
| intel/proset_wi-fi_6_ax201_firmware | all versions | — |
| intel/proset_wi-fi_6e_ax210_firmware | all versions | — |
| intel/proset_wireless_7265_\(rev_d\)_firmware | all versions | — |
| intel/wi-fi_6_ax200_firmware | all versions | — |
| intel/wi-fi_6_ax201_firmware | all versions | — |