An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An a…

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2020-26144 · Microsoft / collected KEV context

cve-program · CVE-2020-26144

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
• https://www.fragattacks.com/
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
• http://www.openwall.com/lists/oss-security/2021/05/11/12
• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63

No related operational record is retained in the current change model.