Weak Encryption Method in Wi-Fi Standards Impacts Multiple Networking Products

CVE-2020-24587

What is CVE-2020-24587?

The vulnerability arises from a weakness in the 802.11 standard, which governs Wi-Fi security protocols. It does not mandate that all fragments of a frame be encrypted with the same key, allowing attackers to exploit this inconsistency. By renewing encryption keys periodically, an adversary can selectively decrypt certain fragments of information sent over the network. This could lead to unauthorized access and data interception during fragmented transmission, affecting the security of interactions over WPA, WPA2, and WEP. Users of affected devices should prioritize updates and patches to mitigate potential risks.

References