CVE-2020-26145

Published: May 11, 2021Modified: Apr 14, 2026

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Affected (13)

Products: Samsung: Galaxy I9305 Firmware · Siemens: 6gk5763 1al00 7da0 Firmware, 6gk5766 1ge00 7da0 Firmware, 6gk5766 1ge00 7db0 Firmware, 6gk5766 1je00 7da0 Firmware, 6gk5766 1ge00 7ta0 Firmware, 6gk5766 1ge00 7tb0 Firmware, 6gk5766 1je00 7ta0 Firmware, 6gk5763 1al00 3aa0 Firmware, 6gk5763 1al00 3da0 Firmware, 6gk5766 1ge00 3da0 Firmware, 6gk5766 1ge00 3db0 Firmware, 6gk5766 1je00 3da0 Firmware

Samsung

1 product

Galaxy I9305 Firmware

Siemens

12 products

6gk5763 1al00 7da0 Firmware

6gk5766 1ge00 7da0 Firmware

6gk5766 1ge00 7db0 Firmware

6gk5766 1je00 7da0 Firmware

6gk5766 1ge00 7ta0 Firmware

6gk5766 1ge00 7tb0 Firmware

6gk5766 1je00 7ta0 Firmware

6gk5763 1al00 3aa0 Firmware

6gk5763 1al00 3da0 Firmware

6gk5766 1ge00 3da0 Firmware

6gk5766 1ge00 3db0 Firmware

6gk5766 1je00 3da0 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung Galaxy I9305 Firmware	Version 4.4.4

Running on/with	Platform Versions
Samsung Galaxy I9305	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5763 1al00 7da0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5763 1al00 7da0	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1ge00 7da0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1ge00 7da0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1ge00 7db0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1ge00 7db0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1je00 7da0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1je00 7da0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1ge00 7ta0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1ge00 7ta0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1ge00 7tb0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1ge00 7tb0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1je00 7ta0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1je00 7ta0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5763 1al00 3aa0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5763 1al00 3aa0	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5763 1al00 3da0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5763 1al00 3da0	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1ge00 3da0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1ge00 3da0	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1ge00 3db0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1ge00 3db0	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 6gk5766 1je00 3da0 Firmware	Before 1.2

Running on/with	Platform Versions
Siemens 6gk5766 1je00 3da0	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (9)

http://www.openwall.com/lists/oss-security/2021/05/11/12

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

Source: cve@mitre.org

Third Party Advisory

https://www.fragattacks.com

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/05/11/12

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.fragattacks.com

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert-portal.siemens.com/productcert/html/ssa-913875.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.