Every CVE Search/ Get API key

CVE-2020-10754

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...

4.3 MediumFix available

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

0.99%Up 0.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 4.3

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Record
CVE-2020-10754
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-287, CWE-306
Updated
2026-11-02
EUVDEUVD-2020-3172 4.3

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Record
EUVD-2020-3172
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-r5p6-9327-8hcq No score

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path...

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Record
GHSA-r5p6-9327-8hcq
Weakness
CWE-306
Updated
2026-11-02
NVD 4.3

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Record
CVE-2020-10754
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness
CWE-287, CWE-306
Updated
2026-11-02
OSV 4.3

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Record
CVE-2020-10754
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-10754 4.3

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Record
DEBIAN-CVE-2020-10754
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVRHSA-2020:3011 4.3

Red Hat Security Advisory: NetworkManager security and bug fix update

Record
RHSA-2020:3011
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:4003 4.3

Red Hat Security Advisory: NetworkManager security and bug fix update

Record
RHSA-2020:4003
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVMGASA-2020-0260 No score

Updated networkmanager packages fix security vulnerability

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely (CVE-2020-10754).

The networkmanager package has been updated to version 1.18.8, fixing this issue and other bugs.

Also, the networkmanager-applet package has been updated to version 1.8.24. It also adds support for connecting to WPA3 / SAE protected wireless networks.

gnome-control-center and gnome-shell have been fixed to correctly identify the connections as WPA3.

Record
MGASA-2020-0260
Updated
2026-11-02
OSVopenSUSE-SU-2024:10602-1 No score

NetworkManager-1.32.10-2.1 on GA media

These are all security issues fixed in the NetworkManager-1.32.10-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10602-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
network-manager
Debian:12
before 1.24.2-1
1.24.2-1
network-manager
Debian:13
before 1.24.2-1
1.24.2-1
network-manager
Debian:14
before 1.24.2-1
1.24.2-1
networkmanager
Mageia:7
before 1.18.8-1.mga7
1.18.8-1.mga7
networkmanager-applet
Mageia:7
before 1.8.24-1.mga7
1.8.24-1.mga7
gnome-control-center
Mageia:7
before 3.32.1-2.2.mga7
3.32.1-2.2.mga7
gnome-shell
Mageia:7
before 3.32.1-2.1.mga7
3.32.1-2.1.mga7
NetworkManager-adsl-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-bluetooth-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-cloud-setup
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
Show 110 moreShow less
Affected packages
PackageAffectedFixed
NetworkManager-cloud-setup-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-debugsource
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-libnm-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ovs-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ppp-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-team-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-tui-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wifi-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wwan-debuginfo
Red Hat:enterprise_linux:8::appstream
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-adsl
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-adsl-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-bluetooth
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-bluetooth-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-cloud-setup-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-config-connectivity-redhat
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-config-server
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-debugsource
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-dispatcher-routing-rules
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-libnm
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-libnm-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ovs
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ovs-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ppp
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ppp-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-team
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-team-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-tui
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-tui-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wifi
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wifi-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wwan
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wwan-debuginfo
Red Hat:enterprise_linux:8::baseos
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-adsl-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-bluetooth-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-cloud-setup-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-debugsource
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-libnm-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-libnm-devel
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ovs-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-ppp-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-team-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-tui-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wifi-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager-wwan-debuginfo
Red Hat:enterprise_linux:8::crb
before 1:1.22.8-5.el8_2
1:1.22.8-5.el8_2
NetworkManager
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-adsl
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-bluetooth
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-debuginfo
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ppp
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-team
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-tui
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wifi
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wwan
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-dispatcher-routing-rules
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib-devel
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm-devel
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ovs
Red Hat:enterprise_linux:7::client
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-adsl
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-bluetooth
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-debuginfo
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ppp
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-team
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-tui
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wifi
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wwan
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-dispatcher-routing-rules
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib-devel
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm-devel
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ovs
Red Hat:enterprise_linux:7::computenode
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-adsl
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-bluetooth
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-config-server
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-debuginfo
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ppp
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-team
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-tui
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wifi
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wwan
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-dispatcher-routing-rules
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib-devel
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm-devel
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ovs
Red Hat:enterprise_linux:7::server
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-adsl
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-bluetooth
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-debuginfo
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ppp
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-team
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-tui
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wifi
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-wwan
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-dispatcher-routing-rules
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-glib-devel
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-libnm-devel
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager-ovs
Red Hat:enterprise_linux:7::workstation
before 1:1.18.8-1.el7
1:1.18.8-1.el7
NetworkManager
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
before 1.32.10-2.1
1.32.10-2.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-10754 is a medium vulnerability (CVSS 4.3) in [red Hat] Networkmanager, published June 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. Fixed in network-manager 1.24.2-1.

References

Show 28 moreShow less
MoveEnter Open