PT-2021-3039 · Samsung+6 · Samsung Galaxy S3+6

Mathy Vanhoef · Published 2021-05-11 · Updated 2021-12-04 · CVE-2020-26144

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Galaxy S3 i9305 version 4.4.4 Check Point GAiA (affected versions not specified)

Description An issue was discovered in the WEP, WPA, WPA2, and WPA3 implementations, which accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. This allows an adversary to inject arbitrary network packets independent of the network configuration. The vulnerability exists due to insufficient input validation, enabling a remote attacker to impact the integrity of protected information using specially crafted unencrypted A-MSDU frames starting with an RFC1042 header with an EAPOL type.

Recommendations For Samsung Galaxy S3 i9305 version 4.4.4, consider disabling the use of WEP, WPA, WPA2, and WPA3 implementations until a patch is available. For Check Point GAiA, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

RCE

Weakness Enumeration

CWE-451

CWE-20

Related Identifiers

ALSA-2021:4356

BDU:2021-02645

CESA-2021_4140

CESA-2021_4356

CVE-2020-26144

RHSA-2021:4140

RHSA-2021:4356

RHSA-2021_4140

RHSA-2021_4356

Affected Products

Almalinux

Centos

Check Point Gaia

Freebsd

Red Hat

Samsung Galaxy S3

Windows

References · 81

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26144 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26144 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-26144 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-9459.html · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-26144 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:4356 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-26144 · Security Note
• https://linux.oracle.com/errata/ELSA-2021-4356.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-26144 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26144 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-26144 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02645 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-26144 · Vendor Advisory
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md · Note