Lucene search

K

[email protected]NVD:CVE-2020-26144

HistoryMay 11, 2021 - 8:15 p.m.

CVE-2020-26144

2021-05-1120:15:08

CWE-20

[email protected]

web.nvd.nist.gov

3

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

35.8%

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Affected configurations

NVD

Node

samsunggalaxy_i9305_firmwareMatch4.4.4

AND

samsunggalaxy_i9305Match-

Node

aristac-250_firmwareRange<10.0.1-31

AND

aristac-250Match-

Node

aristac-260_firmwareRange<10.0.1-31

AND

aristac-260Match-

Node

aristac-230_firmwareRange<10.0.1-31

AND

aristac-230Match-

Node

aristac-235_firmwareRange<10.0.1-31

AND

aristac-235Match-

Node

aristac-200_firmwareRange<11.0.0-36

AND

aristac-200Match-

Node

aristac-120_firmwareRange<11.0.0-36

AND

aristac-120Match-

Node

aristac-130_firmwareRange<11.0.0-36

AND

aristac-130Match-

Node

aristac-100_firmwareRange<11.0.0-36

AND

aristac-100Match-

Node

aristac-110_firmwareRange<11.0.0-36

AND

aristac-110Match-

Node

aristao-105_firmwareRange<11.0.0-36

AND

aristao-105Match-

Node

aristaw-118_firmwareRange<11.0.0-36

AND

aristaw-118Match-

Node

aristac-75_firmwareMatch-

AND

aristac-75Match-

Node

aristao-90_firmwareMatch-

AND

aristao-90Match-

Node

aristac-65_firmwareMatch-

AND

aristac-65Match-

Node

aristaw-68_firmwareMatch-

AND

aristaw-68Match-

Node

siemensscalance_w700_ieee_802.11ax_firmware

AND

siemensscalance_w700_ieee_802.11axMatch-

Node

siemensscalance_w700_ieee_802.11n_firmware

AND

siemensscalance_w700_ieee_802.11nMatch-

References

www.openwall.com/lists/oss-security/2021/05/11/12

cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf

github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu

www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

www.fragattacks.com

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

35.8%