CVE-2020-26145 - CERT CVE
ID CVE-2020-26145
Sažetak An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Reference
CVSS
Base: 3.3
Impact: 2.9
Exploitability:6.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL NONE
CVSS vektor AV:A/AC:L/Au:N/C:N/I:P/A:N
Zadnje važnije ažuriranje 14-04-2026 - 09:16
Objavljeno 11-05-2021 - 20:15