CVE-2020-26140: Alfa AWUS036H Firmware

Medium severity, CVSS 6.5. EPSS: 2.9% chance of exploitation in the next 30 days.

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

Affected products

• Alfa AWUS036H Firmware: version 6.1316.1209 only
• Arista C-100 Firmware: affected versions not specified
• Arista C-110 Firmware: affected versions not specified
• Arista C-120 Firmware: affected versions not specified
• Arista C-130 Firmware: affected versions not specified
• Arista C-200 Firmware: affected versions not specified
• Arista C-230 Firmware: affected versions not specified
• Arista C-235 Firmware: affected versions not specified
• Arista C-250 Firmware: affected versions not specified
• Arista C-260 Firmware: affected versions not specified
• Arista C-65 Firmware: affected versions not specified
• Arista C-75 Firmware: affected versions not specified
• Arista O-105 Firmware: affected versions not specified
• Arista O-90 Firmware: affected versions not specified
• Arista W-118 Firmware: affected versions not specified
• Arista W-68 Firmware: affected versions not specified
• Cisco 1100-4p Firmware: affected versions not specified
• Cisco 1100-8p Firmware: affected versions not specified
• Cisco 1100 Firmware: affected versions not specified
• Cisco 1101-4p Firmware: affected versions not specified
• Cisco 1109-2p Firmware: affected versions not specified
• Cisco 1109-4p Firmware: affected versions not specified
• Cisco Aironet 1532 Firmware: affected versions not specified
• Cisco Aironet 1542d Firmware: affected versions not specified
• Cisco Aironet 1542i Firmware: affected versions not specified
• and 169 more

Published 2021-05-11. Last modified 2026-10-08.