● CVE — Medium
CVE-2020-26139
Vendordebian, netbsd, cisco, aristaProductdebian linux, netbsd, aironet 1542d firmware, c-200 firmware, c-230 firmware, c-235 firmware, c-250 firmware, c-260 firmware, c-100 firmware, c-110 firmware, c-120 firmware, c-130 firmware, c-65 firmware, c-75 firmware, o-105 firmware, o-90 firmware, w-118 firmware, w-68 firmware, 1100-4p firmware, 1100-8p firmware, 1100 firmware, 1101-4p firmware, 1109-2p firmware, 1109-4p firmware, aironet 1532 firmwareDiscoveredMay 11, 2021UpdatedApr 14, 2026
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.