Orta CVSS 6.5
CVE-2020-26144: Galaxy I9305 Firmware: hatalı girdi doğrulama
Açıklama (NVD)
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Özet bilgiler
- Ürün
- Samsung Galaxy I9305 Firmware
- CVSS v3.1
- 6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - EPSS
- %4,91 (yüzdelik 92)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| samsung-galaxy-i9305-firmware | 4.4.4 | 4.4.4 | — |
| arista-c-250-firmware | — | — | 10.0.1-31 |
| arista-c-260-firmware | — | — | 10.0.1-31 |
| arista-c-230-firmware | — | — | 10.0.1-31 |
| arista-c-235-firmware | — | — | 10.0.1-31 |
| arista-c-200-firmware | — | — | 11.0.0-36 |
| arista-c-120-firmware | — | — | 11.0.0-36 |
| arista-c-130-firmware | — | — | 11.0.0-36 |
| arista-c-100-firmware | — | — | 11.0.0-36 |
| arista-c-110-firmware | — | — | 11.0.0-36 |
| arista-o-105-firmware | — | — | 11.0.0-36 |
| arista-w-118-firmware | — | — | 11.0.0-36 |
| arista-c-75-firmware | — | — | — |
| arista-o-90-firmware | — | — | — |
| arista-c-65-firmware | — | — | — |
| arista-w-68-firmware | — | — | — |
| siemens-scalance-w700-ieee-802.11ax-firmware | — | — | — |
| siemens-scalance-w700-ieee-802.11n-firmware | — | — | — |