Vulnerability · NVD

CVE-2020-26144

CVE-2020-26144 : medium severity (CVSS 6.5). No tracked catalog app is linked to this CVE.

Severity (CVSS): 6.5
Exploitation: 4.9 %
Tracked apps: 0
Still exposed: 0

Published on 2021-05-11

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Attack vector : Adjacent network No privileges required No user interaction

Show raw CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS 4.91% above median percentile 92.2%

OS versions that fix this CVE

This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.

Windows Server 2019 Fixed in 10.0.17763.1935
Windows Server 2016 Fixed in 10.0.14393.4401
Windows 10 20H2 · 2020-H2 Fixed in 10.0.19042.982
Windows 10 2004 · 2020-04 Fixed in 10.0.19041.982
Windows 10 1909 · 2019-09 Fixed in 10.0.18363.1556
Windows 10 1809 · 2018-09 Fixed in 10.0.17763.1935
Windows 10 1803 · 2018-03 Fixed in 10.0.17134.2207
Windows 10 1607 · 2016-07 Fixed in 10.0.14393.4401

View on NVD ↗

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM