Skip to main content

Webex Room 70 Dual Firmware

3 CVEs product

Monthly

CVE-2020-26140 May 11, 20:15 MEDIUM CISA This Month

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Cisco Code Injection Siemens Intel +196
NVD GitHub VulDB
CVSS 3.1
6.5
EPSS
0.2%
CVE-2020-26139 May 11, 20:15 MEDIUM PATCH CISA This Month

An issue was discovered in the kernel in NetBSD 7.1. Rated medium severity (CVSS 5.3), this vulnerability is no authentication required. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Cisco Debian Intel Debian Linux +166
NVD GitHub VulDB
CVSS 3.1
5.3
EPSS
1.1%
CVE-2020-24588 May 11, 20:15 LOW POC PATCH CISA Monitor

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is. Rated low severity (CVSS 3.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Microsoft Cisco Code Injection Debian Siemens +184
NVD GitHub VulDB
CVSS 3.1
3.5
EPSS
0.3%
Threat
4.2
EPSS 0% CVSS 6.5
MEDIUM This Month

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Cisco Code Injection +198
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

An issue was discovered in the kernel in NetBSD 7.1. Rated medium severity (CVSS 5.3), this vulnerability is no authentication required. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Cisco Debian +168
NVD GitHub VulDB
EPSS 0% 4.2 CVSS 3.5
LOW POC PATCH Monitor

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is. Rated low severity (CVSS 3.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Microsoft Cisco Code Injection +186
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy