Description
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.
Metrics
CVSS 3.1 5.3/10
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Siemens | SCALANCE W1748-1 M12 | < V3.0.0 |
| Siemens | SCALANCE W1748-1 M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-1 M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-2 EEC M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-2 M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-2IA M12 | < V3.0.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfPatch, Third Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing List, Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfPatch, Third Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing List, Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html
- https://cert-portal.siemens.com/productcert/html/ssa-913875.html
Timeline
- Published
- May 11, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified