Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-26144

kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

CVSS 3.1 · 6.5 Medium EPSS 4.9% KEV · Not listed
Vendors
Arista Redhat Samsung and 1 more
Products
C-100 C-100 Firmware C-110 and 34 more
CVE-2020-26146

kernel: reassembling encrypted fragments with non-consecutive packet numbers

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.

CVSS 3.1 · 5.3 Medium EPSS 5.6% KEV · Not listed
Vendors
Arista Redhat Samsung and 1 more
Products
C-100 C-100 Firmware C-110 and 36 more
CVE-2020-26145

kernel: accepting plaintext broadcast fragments as full frames

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

CVSS 3.1 · 6.5 Medium EPSS 3.5% KEV · Not listed
Vendors
Redhat Samsung Siemens
Products
Enterprise Linux Galaxy I9305 Galaxy I9305 Firmware and 24 more