Not rated

CVE-2020-26145 An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices

Description

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Affected products and versions

Product	Affected versions	Fixed in
n/a	Versions not published
SCALANCE WAM763-1 1.2	earliest → < 1.2.0	1.2.0
SCALANCE WAM766-1 1.2	earliest → < 1.2.0	1.2.0
SCALANCE WAM766-1 (US) 1.2	earliest → < 1.2.0	1.2.0
SCALANCE WAM766-1 EEC 1.2	earliest → < 1.2.0	1.2.0
SCALANCE WAM766-1 EEC (US) 1.2	earliest → < 1.2.0	1.2.0
SCALANCE WUM763-1 1.2	earliest → < 1.2.0	1.2.0
SCALANCE WUM766-1 1.2	earliest → < 1.2.0	1.2.0
SCALANCE WUM766-1 (USA) 1.2	earliest → < 1.2.0	1.2.0