CVE-2020-26145 | BDVDB-2026-153451 Detail

SiemensSCALANCE WAM763-1

Description#

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.fragattacks.com
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
http://www.openwall.com/lists/oss-security/2021/05/11/12
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
https://cert-portal.siemens.com/productcert/html/ssa-913875.html

Exploit#

No public exploit known

History#

Version 12021-05-11Record published in the CVE List.
Version 22026-04-14Most recent update recorded in the CVE List.