An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Metrics

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00524.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Arista Subscribe
C-100 Subscribe
C-100 Firmware Subscribe
C-110 Subscribe
C-110 Firmware Subscribe
C-120 Subscribe
C-120 Firmware Subscribe
C-130 Subscribe
C-130 Firmware Subscribe
C-200 Subscribe
C-200 Firmware Subscribe
C-230 Subscribe
C-230 Firmware Subscribe
C-235 Subscribe
C-235 Firmware Subscribe
C-250 Subscribe
C-250 Firmware Subscribe
C-260 Subscribe
C-260 Firmware Subscribe
C-65 Subscribe
C-65 Firmware Subscribe
C-75 Subscribe
C-75 Firmware Subscribe
O-105 Subscribe
O-105 Firmware Subscribe
O-90 Subscribe
O-90 Firmware Subscribe
W-118 Subscribe
W-118 Firmware Subscribe
W-68 Subscribe
W-68 Firmware Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Samsung Subscribe
Galaxy I9305 Subscribe
Galaxy I9305 Firmware Subscribe
Siemens Subscribe
Scalance W700 Ieee 802.11ax Subscribe
Scalance W700 Ieee 802.11ax Firmware Subscribe
Scalance W700 Ieee 802.11n Subscribe
Scalance W700 Ieee 802.11n Firmware Subscribe

Configuration 1 [-]

AND
cpe:2.3:o:samsung:galaxy_i9305_firmware:4.4.4:*:*:*:*:*:*:*
cpe:2.3:h:samsung:galaxy_i9305:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:arista:c-250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-250:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:arista:c-260_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-260:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:arista:c-230_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-230:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:arista:c-235_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-235:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:arista:c-200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-200:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:arista:c-120_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-120:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
cpe:2.3:o:arista:c-130_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-130:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
cpe:2.3:o:arista:c-100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-100:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND
cpe:2.3:o:arista:c-110_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-110:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND
cpe:2.3:o:arista:o-105_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:o-105:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND
cpe:2.3:o:arista:w-118_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:arista:w-118:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND
cpe:2.3:o:arista:c-75_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-75:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND
cpe:2.3:o:arista:o-90_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:arista:o-90:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND
cpe:2.3:o:arista:c-65_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:arista:c-65:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND
cpe:2.3:o:arista:w-68_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:arista:w-68:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND
cpe:2.3:o:siemens:scalance_w700_ieee_802.11ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_w700_ieee_802.11ax:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND
cpe:2.3:o:siemens:scalance_w700_ieee_802.11n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:scalance_w700_ieee_802.11n:-:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-348.rt7.130.el8 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2021:4140 2021-11-09T00:00:00Z
kernel-0:4.18.0-348.el8 cpe:/o:redhat:enterprise_linux:8 RHSA-2021:4356 2021-11-09T00:00:00Z

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2020-18771 An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.openwall.com/lists/oss-security/2021/05/11/12 cve-icon cve-icon
https://cert-portal.siemens.com/productcert/html/ssa-019200.html cve-icon
https://cert-portal.siemens.com/productcert/html/ssa-913875.html cve-icon
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf cve-icon cve-icon
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2020-26144 cve-icon
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu cve-icon cve-icon
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2020-26144 cve-icon
https://www.fragattacks.com cve-icon cve-icon
History

Tue, 14 Apr 2026 09:30:00 +0000

Type Values Removed Values Added
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-04-14T08:49:08.532Z

Reserved: 2020-09-29T00:00:00.000Z

Link: CVE-2020-26144

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-05-11T20:15:08.837

Modified: 2026-04-14T09:16:25.173

Link: CVE-2020-26144

cve-icon Redhat

Severity : Moderate

Publid Date: 2021-05-11T00:00:00Z

Links: CVE-2020-26144 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses