Back to CVE records
Medium 6.5Published May 11, 2021
CVE-2020-26144An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices.
Updated under an hour ago ()
Does this affect you?
It affects Siemens SCALANCE W721-1 RJ45 and 48 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
- CVSS
- 6.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- mitre
- NVD analysis
- Modified
- Record last updated
- Oct 8, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Siemens SCALANCE W721-1 RJ45 siemens:scalance_w721_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W722-1 RJ45 siemens:scalance_w722_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W734-1 RJ45 siemens:scalance_w734_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W734-1 RJ45 (USA) siemens:scalance_w734_1_rj45_usa (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W738-1 M12 siemens:scalance_w738_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W748-1 M12 siemens:scalance_w748_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W748-1 RJ45 siemens:scalance_w748_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W761-1 RJ45 siemens:scalance_w761_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W774-1 M12 EEC siemens:scalance_w774_1_m12_eec (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W774-1 RJ45 siemens:scalance_w774_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W774-1 RJ45 (USA) siemens:scalance_w774_1_rj45_usa (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W778-1 M12 siemens:scalance_w778_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W778-1 M12 EEC siemens:scalance_w778_1_m12_eec (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W778-1 M12 EEC (USA) siemens:scalance_w778_1_m12_eec_usa (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-1 RJ45 siemens:scalance_w786_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-2 RJ45 siemens:scalance_w786_2_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-2 SFP siemens:scalance_w786_2_sfp (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W786-2IA RJ45 siemens:scalance_w786_2ia_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-1 M12 siemens:scalance_w788_1_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-1 RJ45 siemens:scalance_w788_1_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-2 M12 siemens:scalance_w788_2_m12 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-2 M12 EEC siemens:scalance_w788_2_m12_eec (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE W788-2 RJ45 siemens:scalance_w788_2_rj45 (from the name) | before V6.6.0 | CISA ADP |
Siemens SCALANCE WAM763-1 siemens:scalance_wam763_1 (from the name) | before V1.2.0 | CISA ADP |
Siemens SCALANCE WAM766-1 siemens:scalance_wam766_1 (from the name) | before V1.2.0 | CISA ADP |
Siemens SCALANCE WAM766-1 (US) siemens:scalance_wam766_1_us (from the name) | before V1.2.0 | CISA ADP |
Siemens SCALANCE WAM766-1 EEC siemens:scalance_wam766_1_eec (from the name) | before V1.2.0 | CISA ADP |
Siemens SCALANCE WAM766-1 EEC (US) siemens:scalance_wam766_1_eec_us (from the name) | before V1.2.0 | CISA ADP |
Siemens SCALANCE WUM763-1 siemens:scalance_wum763_1 (from the name) | before V1.2.0 | CISA ADP |
Siemens SCALANCE WUM766-1 siemens:scalance_wum766_1 (from the name) | before V1.2.0 | CISA ADP |
Siemens SCALANCE WUM766-1 (USA) siemens:scalance_wum766_1_usa (from the name) | before V1.2.0 | CISA ADP |
samsung galaxy_i9305_firmware samsung:galaxy_i9305_firmware | 4.4.4 | NVD |
arista c-250_firmware arista:c-250_firmware | before 10.0.1-31 | NVD |
arista c-260_firmware arista:c-260_firmware | before 10.0.1-31 | NVD |
arista c-230_firmware arista:c-230_firmware | before 10.0.1-31 | NVD |
arista c-235_firmware arista:c-235_firmware | before 10.0.1-31 | NVD |
arista c-200_firmware arista:c-200_firmware | before 11.0.0-36 | NVD |
arista c-120_firmware arista:c-120_firmware | before 11.0.0-36 | NVD |
arista c-130_firmware arista:c-130_firmware | before 11.0.0-36 | NVD |
arista c-100_firmware arista:c-100_firmware | before 11.0.0-36 | NVD |
arista c-110_firmware arista:c-110_firmware | before 11.0.0-36 | NVD |
arista o-105_firmware arista:o-105_firmware | before 11.0.0-36 | NVD |
arista w-118_firmware arista:w-118_firmware | before 11.0.0-36 | NVD |
arista c-75_firmware arista:c-75_firmware | all versions | NVD |
arista o-90_firmware arista:o-90_firmware | all versions | NVD |
arista c-65_firmware arista:c-65_firmware | all versions | NVD |
arista w-68_firmware arista:w-68_firmware | all versions | NVD |
siemens scalance_w700_ieee_802.11ax_firmware siemens:scalance_w700_ieee_802.11ax_firmware | all versions | NVD |
siemens scalance_w700_ieee_802.11n_firmware siemens:scalance_w700_ieee_802.11n_firmware | all versions | NVD |
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuvendor-advisory, x-refsource-cisco
- https://www.fragattacks.comx-refsource-misc
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdx-refsource-misc
- http://www.openwall.com/lists/oss-security/2021/05/11/12mailing-list, x-refsource-mlist
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfx-refsource-confirm
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63x-refsource-misc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.