Disclosure summary
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Source-reported weakness categories
CWE-20
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2020-26144
Open original source · Updated Oct 08, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| samsung | galaxy_i9305_firmware | 4.4.4 |
| arista | c-250_firmware | * {"versionEndExcluding":"10.0.1-31"} |
| arista | c-260_firmware | * {"versionEndExcluding":"10.0.1-31"} |
| arista | c-230_firmware | * {"versionEndExcluding":"10.0.1-31"} |
| arista | c-235_firmware | * {"versionEndExcluding":"10.0.1-31"} |
| arista | c-200_firmware | * {"versionEndExcluding":"11.0.0-36"} |
| arista | c-120_firmware | * {"versionEndExcluding":"11.0.0-36"} |
| arista | c-130_firmware | * {"versionEndExcluding":"11.0.0-36"} |
| arista | c-100_firmware | * {"versionEndExcluding":"11.0.0-36"} |
| arista | c-110_firmware | * {"versionEndExcluding":"11.0.0-36"} |
| arista | o-105_firmware | * {"versionEndExcluding":"11.0.0-36"} |
| arista | w-118_firmware | * {"versionEndExcluding":"11.0.0-36"} |
| arista | c-75_firmware | - |
| arista | o-90_firmware | - |
| arista | c-65_firmware | - |
| arista | w-68_firmware | - |
| siemens | scalance_w700_ieee_802.11ax_firmware | * |
| siemens | scalance_w700_ieee_802.11n_firmware | * |
Original records & references
- NIST NVD record
- CVE Program record
- cert-portal.siemens.com — Third Party Advisory
- github.com — Third Party Advisory
- tools.cisco.com — Third Party Advisory
- www.arista.com — Third Party Advisory
- www.fragattacks.com — Third Party Advisory
- cert-portal.siemens.com — Third Party Advisory
- github.com — Third Party Advisory
- tools.cisco.com — Third Party Advisory
- www.arista.com — Third Party Advisory
- www.fragattacks.com — Third Party Advisory
- cert-portal.siemens.com
- cert-portal.siemens.com
PUBLISHED 2021-05-11T16:15:08-04:00
MODIFIED 2026-10-08T18:16:58-04:00
INGESTED 2026-10-10T20:50:20-04:00