CVE-2020-26144CWE-20

CVE-2020-26144

Medium · published May 12, 2021

CVSS v3.1
6.5
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.04913 · 92.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-05-12T00:15Z
Affected products (18)
ProductVersionsFixed in
samsung/galaxy_i9305_firmwareall versions—
arista/c-250_firmware< 10.0.1-3110.0.1-31
arista/c-260_firmware< 10.0.1-3110.0.1-31
arista/c-230_firmware< 10.0.1-3110.0.1-31
arista/c-235_firmware< 10.0.1-3110.0.1-31
arista/c-200_firmware< 11.0.0-3611.0.0-36
arista/c-120_firmware< 11.0.0-3611.0.0-36
arista/c-130_firmware< 11.0.0-3611.0.0-36
arista/c-100_firmware< 11.0.0-3611.0.0-36
arista/c-110_firmware< 11.0.0-3611.0.0-36
arista/o-105_firmware< 11.0.0-3611.0.0-36
arista/w-118_firmware< 11.0.0-3611.0.0-36
arista/c-75_firmwareall versions—
arista/o-90_firmwareall versions—
arista/c-65_firmwareall versions—
arista/w-68_firmwareall versions—
siemens/scalance_w700_ieee_802.11ax_firmwareall versions—
siemens/scalance_w700_ieee_802.11n_firmwareall versions—
References (14)
http://www.openwall.com/lists/oss-security/2021/05/11/12 · [email protected]https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf · [email protected]https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md · [email protected]https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu · [email protected]https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 · [email protected]https://www.fragattacks.com · [email protected]http://www.openwall.com/lists/oss-security/2021/05/11/12 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf · af854a3a-2127-422b-91ae-364da2661108https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md · af854a3a-2127-422b-91ae-364da2661108https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu · af854a3a-2127-422b-91ae-364da2661108https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 · af854a3a-2127-422b-91ae-364da2661108https://www.fragattacks.com · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-019200.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-913875.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 11 MAY 19:33Z
    An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices
    cvelistv5