{"cve":{"cve_id":"CVE-2020-26144","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.04913,"epss_percentile":0.91989,"epss_as_of":"2026-10-15","description":"An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.","published_at":"2021-05-11T19:33:04Z","last_modified_at":"2026-10-08T22:16:58.710000Z","cvss_v3_score":6.5,"cvss_v3_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-20"],"nvd_references":["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu","https://www.fragattacks.com","https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md","http://www.openwall.com/lists/oss-security/2021/05/11/12","https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf","https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63"],"vuln_status":"Modified","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-10-11T15:41:52.057234Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"A","value_label":"Adjacent"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"N","value_label":"None"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-100-firmware","product_name":"c-100_firmware","version_start":null,"version_start_inclusive":null,"version_end":"11.0.0-36","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-100_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-110-firmware","product_name":"c-110_firmware","version_start":null,"version_start_inclusive":null,"version_end":"11.0.0-36","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-110_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-120-firmware","product_name":"c-120_firmware","version_start":null,"version_start_inclusive":null,"version_end":"11.0.0-36","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-120_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-130-firmware","product_name":"c-130_firmware","version_start":null,"version_start_inclusive":null,"version_end":"11.0.0-36","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-130_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-200-firmware","product_name":"c-200_firmware","version_start":null,"version_start_inclusive":null,"version_end":"11.0.0-36","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-200_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-230-firmware","product_name":"c-230_firmware","version_start":null,"version_start_inclusive":null,"version_end":"10.0.1-31","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-230_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-235-firmware","product_name":"c-235_firmware","version_start":null,"version_start_inclusive":null,"version_end":"10.0.1-31","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-235_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-250-firmware","product_name":"c-250_firmware","version_start":null,"version_start_inclusive":null,"version_end":"10.0.1-31","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-250_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-260-firmware","product_name":"c-260_firmware","version_start":null,"version_start_inclusive":null,"version_end":"10.0.1-31","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:c-260_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-65-firmware","product_name":"c-65_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:arista:c-65_firmware:-:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"c-75-firmware","product_name":"c-75_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:arista:c-75_firmware:-:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"o-105-firmware","product_name":"o-105_firmware","version_start":null,"version_start_inclusive":null,"version_end":"11.0.0-36","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:o-105_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"o-90-firmware","product_name":"o-90_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:arista:o-90_firmware:-:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"w-118-firmware","product_name":"w-118_firmware","version_start":null,"version_start_inclusive":null,"version_end":"11.0.0-36","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:o:arista:w-118_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"w-68-firmware","product_name":"w-68_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:arista:w-68_firmware:-:*:*:*:*:*:*:*"},{"vendor_slug":"samsung","vendor_name":"Samsung","product_slug":"galaxy-i9305-firmware","product_name":"galaxy_i9305_firmware","version_start":"4.4.4","version_start_inclusive":true,"version_end":"4.4.4","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:o:samsung:galaxy_i9305_firmware:4.4.4:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-w700-ieee-802.11ax-firmware","product_name":"scalance_w700_ieee_802.11ax_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:siemens:scalance_w700_ieee_802.11ax_firmware:*:*:*:*:*:*:*:*"},{"vendor_slug":"siemens","vendor_name":"Siemens","product_slug":"scalance-w700-ieee-802.11n-firmware","product_name":"scalance_w700_ieee_802.11n_firmware","version_start":null,"version_start_inclusive":null,"version_end":null,"version_end_inclusive":null,"cpe23_uri":"cpe:2.3:o:siemens:scalance_w700_ieee_802.11n_firmware:*:*:*:*:*:*:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://www.fragattacks.com","source_type":"MISC","tags":[]},{"url":"https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md","source_type":"MISC","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/12","source_type":"MAILING_LIST","tags":["mailing-list"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf","source_type":"MISC","tags":[]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"published","at":"2021-05-11T19:33:04Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-10-10T21:36:59.224259Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-10-10T21:36:59.224259Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-10-10T21:36:59.224259Z","label":"CVSS score revised","source":"nvd"}]}