Back to CVE records
Medium 6.5Published May 11, 2021

CVE-2020-26140An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H.

Updated under an hour ago ()

Does this affect you?

It affects Siemens SCALANCE W721-1 RJ45 and 59 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.

CVSS
6.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
mitre
NVD analysis
Modified
Record last updated
Oct 8, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Siemens SCALANCE W721-1 RJ45
siemens:scalance_w721_1_rj45 (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W722-1 RJ45
siemens:scalance_w722_1_rj45 (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W734-1 RJ45
siemens:scalance_w734_1_rj45 (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W734-1 RJ45 (USA)
siemens:scalance_w734_1_rj45_usa (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W738-1 M12
siemens:scalance_w738_1_m12 (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W748-1 M12
siemens:scalance_w748_1_m12 (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W748-1 RJ45
siemens:scalance_w748_1_rj45 (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W761-1 RJ45
siemens:scalance_w761_1_rj45 (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W774-1 M12 EEC
siemens:scalance_w774_1_m12_eec (from the name)
before V6.6.0
CISA ADP
Siemens SCALANCE W774-1 RJ45
siemens:scalance_w774_1_rj45 (from the name)
before V6.6.0
CISA ADP

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.