CVE-2020-26144
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.9%
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Produtos afetados
n/a · n/aReferências
https://cert-portal.siemens.com/productcert/html/ssa-019200.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-913875.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfhttps://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuhttps://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63https://www.fragattacks.comhttp://www.openwall.com/lists/oss-security/2021/05/11/12