CVE-2020-26145

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:samsung:galaxy_i9305_firmware:4.4.4:*:*:*:*:*:*:*
cpe:2.3:h:samsung:galaxy_i9305:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:siemens:6gk5763-1al00-7da0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5763-1al00-7da0:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1ge00-7da0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1ge00-7da0:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1ge00-7db0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1ge00-7db0:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1je00-7da0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1je00-7da0:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1ge00-7ta0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1ge00-7ta0:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1ge00-7tb0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1ge00-7tb0:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1je00-7ta0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1je00-7ta0:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:siemens:6gk5763-1al00-3aa0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5763-1al00-3aa0:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:siemens:6gk5763-1al00-3da0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5763-1al00-3da0:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1ge00-3da0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1ge00-3da0:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1ge00-3db0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1ge00-3db0:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:siemens:6gk5766-1je00-3da0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:6gk5766-1je00-3da0:-:*:*:*:*:*:*:*

Information

Published : 2021-05-11 13:15

Updated : 2022-05-13 13:53


NVD link : CVE-2020-26145

Mitre link : CVE-2020-26145


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

siemens

  • 6gk5766-1ge00-3da0_firmware
  • 6gk5766-1je00-7ta0_firmware
  • 6gk5766-1ge00-7ta0_firmware
  • 6gk5766-1je00-7da0_firmware
  • 6gk5763-1al00-3da0_firmware
  • 6gk5766-1ge00-3db0_firmware
  • 6gk5766-1ge00-7tb0
  • 6gk5766-1ge00-7ta0
  • 6gk5766-1ge00-7da0
  • 6gk5766-1je00-3da0_firmware
  • 6gk5766-1ge00-7da0_firmware
  • 6gk5766-1je00-7da0
  • 6gk5766-1je00-3da0
  • 6gk5763-1al00-7da0
  • 6gk5766-1ge00-7tb0_firmware
  • 6gk5763-1al00-3aa0
  • 6gk5766-1ge00-3db0
  • 6gk5763-1al00-3da0
  • 6gk5766-1ge00-7db0
  • 6gk5766-1ge00-3da0
  • 6gk5766-1je00-7ta0
  • 6gk5766-1ge00-7db0_firmware
  • 6gk5763-1al00-7da0_firmware
  • 6gk5763-1al00-3aa0_firmware

samsung

  • galaxy_i9305_firmware
  • galaxy_i9305