CVE-2020-26145

Publicada el 11 may 2021 · Actualizada el 14 abr 2026

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 3.5%

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Productos afectados

n/a · n/a

Referencias

https://cert-portal.siemens.com/productcert/html/ssa-913875.html https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md https://www.fragattacks.com http://www.openwall.com/lists/oss-security/2021/05/11/12