CVE-2020-24588: Arista C-100 Firmware

Low severity, CVSS 3.5. EPSS: 3.6% chance of exploitation in the next 30 days.

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.

Affected products

• Arista C-100 Firmware: affected versions not specified
• Arista C-110 Firmware: affected versions not specified
• Arista C-120 Firmware: affected versions not specified
• Arista C-130 Firmware: affected versions not specified
• Arista C-200 Firmware: affected versions not specified
• Arista C-230 Firmware: affected versions not specified
• Arista C-235 Firmware: affected versions not specified
• Arista C-250 Firmware: affected versions not specified
• Arista C-260 Firmware: affected versions not specified
• Arista C-65 Firmware: affected versions not specified
• Arista C-75 Firmware: affected versions not specified
• Arista O-105 Firmware: affected versions not specified
• Arista O-90 Firmware: affected versions not specified
• Arista W-118 Firmware: affected versions not specified
• Arista W-68 Firmware: affected versions not specified
• Cisco 1100-4p Firmware: affected versions not specified
• Cisco 1100-8p Firmware: affected versions not specified
• Cisco 1100 Firmware: affected versions not specified
• Cisco 1101-4p Firmware: affected versions not specified
• Cisco 1109-2p Firmware: affected versions not specified
• Cisco 1109-4p Firmware: affected versions not specified
• Cisco Aironet 1532 Firmware: affected versions not specified
• Cisco Aironet 1542d Firmware: affected versions not specified
• Cisco Aironet 1542i Firmware: affected versions not specified
• Cisco Aironet 1800 Firmware: affected versions not specified
• and 156 more

Published 2021-05-11. Last modified 2026-06-17.