CVE-2020-26141: Alfa AWUS036H Firmware

Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days.

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

Affected products

  • Alfa AWUS036H Firmware: version 6.1316.1209 only
  • Cisco IP Conference Phone 8832 Firmware: before 14.1\(1\) (fixed in 14.1\(1\))
  • Cisco IP Phone 6861 Firmware: before 11.3\(5\) (fixed in 11.3\(5\))
  • Cisco IP Phone 8861 Firmware: before 11.3\(5\) (fixed in 11.3\(5\)); before 14.1\(1\) (fixed in 14.1\(1\))
  • Cisco IP Phone 8865 Firmware: before 14.1\(1\) (fixed in 14.1\(1\))
  • Cisco Meraki GR10 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki GR60 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR12 Firmware: before 26.8.3 (fixed in 26.8.3)
  • Cisco Meraki MR18 Firmware: before 26.8.3 (fixed in 26.8.3)
  • Cisco Meraki MR20 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR26 Firmware: before 26.8.3 (fixed in 26.8.3)
  • Cisco Meraki MR30H Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR32 Firmware: before 26.8.3 (fixed in 26.8.3)
  • Cisco Meraki MR33 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR34 Firmware: before 26.8.3 (fixed in 26.8.3)
  • Cisco Meraki MR36 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR42 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR42E Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR44 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR45 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR46 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR46E Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR52 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR53 Firmware: before 27.7.1 (fixed in 27.7.1)
  • Cisco Meraki MR53E Firmware: before 27.7.1 (fixed in 27.7.1)
  • and 70 more

Published 2021-05-11. Last modified 2026-06-17.