Description
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.
Metrics
CVSS 3.1 6.5/10
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W778-1 M12 | < V6.6.0 |
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html
- https://cert-portal.siemens.com/productcert/html/ssa-913875.html
Timeline
- Published
- May 11, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified