Test ID:	1.3.6.1.4.1.25623.1.0.117424
Category:	General
Title:	AVM FRITZ!Box Multiple Wi-Fi Vulnerabilities (FragAttacks)
Summary:	AVM FRITZ!Box devices are prone to multiple Wi-Fi; vulnerabilities.
Description:	Summary: AVM FRITZ!Box devices are prone to multiple Wi-Fi vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2020-24586: fragment cache attack (not clearing fragments from memory when (re)connecting to a network) - CVE-2020-24588: aggregation attack (accepting non-SPP A-MSDU frames) Vulnerability Impact: An adversary that is within radio range of a victim can abuse these vulnerabilities to steal user information or attack devices. Affected Software/OS: AVM FRITZ!Box devices running AVM FRITZ!OS before version 7.27. Solution: Update to AVM FRITZ!OS 7.27 or later. CVSS Score: 2.9 CVSS Vector: AV:A/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-24586 Cisco Security Advisory: 20210511 Multiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 2021 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 https://www.fragattacks.com https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html http://www.openwall.com/lists/oss-security/2021/05/11/12 Common Vulnerability Exposure (CVE) ID: CVE-2020-24588
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.