CVE-2020-24587: Arista C-100 Firmware

Low severity, CVSS 2.6. EPSS: 2.6% chance of exploitation in the next 30 days.

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed.

Affected products

• Arista C-100 Firmware: affected versions not specified
• Arista C-110 Firmware: affected versions not specified
• Arista C-120 Firmware: affected versions not specified
• Arista C-130 Firmware: affected versions not specified
• Arista C-200 Firmware: affected versions not specified
• Arista C-230 Firmware: affected versions not specified
• Arista C-235 Firmware: affected versions not specified
• Arista C-250 Firmware: affected versions not specified
• Arista C-260 Firmware: affected versions not specified
• Arista C-65 Firmware: affected versions not specified
• Arista C-75 Firmware: affected versions not specified
• Arista O-105 Firmware: affected versions not specified
• Arista O-90 Firmware: affected versions not specified
• Arista W-118 Firmware: affected versions not specified
• Arista W-68 Firmware: affected versions not specified
• Cisco 1100-4p Firmware: affected versions not specified
• Cisco 1100-8p Firmware: affected versions not specified
• Cisco 1100 Firmware: affected versions not specified
• Cisco 1101-4p Firmware: affected versions not specified
• Cisco 1109-2p Firmware: affected versions not specified
• Cisco 1109-4p Firmware: affected versions not specified
• Cisco Aironet 1532 Firmware: affected versions not specified
• Cisco Aironet 1542d Firmware: affected versions not specified
• Cisco Aironet 1542i Firmware: affected versions not specified
• Cisco Aironet 1552 Firmware: affected versions not specified
• and 143 more

Published 2021-05-11. Last modified 2026-06-17.