CVE-2020-26139: Arista C-100 Firmware

Medium severity, CVSS 5.3. EPSS: 6.5% chance of exploitation in the next 30 days.

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Affected products

• Arista C-100 Firmware: affected versions not specified
• Arista C-110 Firmware: affected versions not specified
• Arista C-120 Firmware: affected versions not specified
• Arista C-130 Firmware: affected versions not specified
• Arista C-200 Firmware: affected versions not specified
• Arista C-230 Firmware: affected versions not specified
• Arista C-235 Firmware: affected versions not specified
• Arista C-250 Firmware: affected versions not specified
• Arista C-260 Firmware: affected versions not specified
• Arista C-65 Firmware: affected versions not specified
• Arista C-75 Firmware: affected versions not specified
• Arista O-105 Firmware: affected versions not specified
• Arista O-90 Firmware: affected versions not specified
• Arista W-118 Firmware: affected versions not specified
• Arista W-68 Firmware: affected versions not specified
• Cisco 1100-4p Firmware: affected versions not specified
• Cisco 1100-8p Firmware: affected versions not specified
• Cisco 1100 Firmware: affected versions not specified
• Cisco 1101-4p Firmware: affected versions not specified
• Cisco 1109-2p Firmware: affected versions not specified
• Cisco 1109-4p Firmware: affected versions not specified
• Cisco Aironet 1532 Firmware: affected versions not specified
• Cisco Aironet 1542d Firmware: affected versions not specified
• Cisco Aironet 1542i Firmware: affected versions not specified
• Cisco Aironet 1552 Firmware: affected versions not specified
• and 141 more

Published 2021-05-11. Last modified 2026-06-17.