CVE-2020-26146

lowpriority · track · 23EPSS 0.056 · 93 %ileDEEUNLRUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
5.62% (93rd) EPSS
CVSS 2.9 · low
Is it mine?
378 products
Check your exposure
Who says so?
9 sources
cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-26

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

02

cvss

Technical severity, 0–10. One row per scoring source.

5.3
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.9–5.3

v2.02.9lowAV:A/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 5.5 · impact 2.9
v3.15.3mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USexploitability 1.6 · impact 3.6
v3.05.3mediumCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · CISA US
v3.15.3mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · ENISA EU
v3.15.3mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondaryexploitability 1.6 · impact 3.6
v3.15.3mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · Siemens ProductCERT DE
v3.14.9mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.15.3mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · NCSC-NL NL
v3.14.8mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:Nsecondary · Cisco PSIRT US
v3.15.3mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · CISA US
v3.15.3mediumAV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USprimaryCWE-20USCWE-20USCWE-20USCWE-307US
05

affected products (378)

Products and version ranges known to be affected.

showing 20 of 378
06

advisories (10)

Vendor and ecosystem advisories describing this.

  • NCSC-2026-0112Kwetsbaarheden verholpen in Siemens productenNL2026-04-14csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Analytics Toolkit, Ruggedcom, Industrial Edge Management Pro, SIDIS en TPM.

  • SSA-019200SSA-019200: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11n Devices Before V6.6.02026-04-14csaf · siemens_psirtDE

    SCALANCE W-700 IEEE 802.11n family before V6.6.0 are affected by multiple vulnerabilities. Siemens has released a new version for SCALANCE W-700 IEEE 802.11n family and recommends to update to the latest version.

  • SSA-913875SSA-913875: Frame Aggregation and Fragmentation Vulnerabilities in 802.112021-07-13csaf · siemens_psirtDE

    Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of FragAttacks, have been published. Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forge encrypted frames, which could result in sensitive data disclosure and possibly traffic manipulation. The advised Siemens products are only affected by some of the published vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

  • WID-SEC-W-2022-2069IEEE 802.11 (WLAN): Mehrere SchwachstellenDeutsch2021-05-11csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der IEEE 802.11 Spezifikation und zahlreichen Implementierungen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Netzwerkverkehr zu manipulieren und um Informationen offenzulegen.

  • cisco-sa-wifi-faf-22epcEWuMultiple Vulnerabilities in Frame Aggregation and Fragmentation Implementations of 802.11 Specification Affecting Cisco Products: May 20212021-05-11csaf · cisco_csafUS

    On May 11, 2021, the research paper Fragment and Forge: Breaking Wi-Fi Through Frame Aggregation and Fragmentation was made public. This paper discusses 12 vulnerabilities in the 802.11 standard. One vulnerability is in the frame aggregation functionality, two vulnerabilities are in the frame fragmentation functionality, and the other nine are implementation vulnerabilities. These vulnerabilities could allow an attacker to forge encrypted frames, which could in turn enable the exfiltration of sensitive data from a targeted device. This advisory will be updated as additional information becomes available.

  • ICSA-21-236-01Hitachi ABB Power Grids TropOS2021-08-24icsa · cisa_csaf_otUS

    Successful exploitation of these vulnerabilities could allow an attacker to direct a client that is connected to a TropOS Wi-Fi access point to fake websites and extract sensitive data.

  • ICSA-22-102-04Mitsubishi Electric GT25-WLAN2022-04-12icsa · cisa_csaf_otUS

    There are multiple vulnerabilities due to design flaws in the frame fragmentation functionality and the frame aggregation functionality in the Wireless Communication Standards IEEE 802.11. These vulnerabilities could allow an attacker to steal communication contents or inject unauthorized packets.

  • ICSA-22-104-04Siemens SCALANCE FragAttacks2021-07-13icsa · cisa_csaf_otUS

    Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of FragAttacks, have been published. Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forge encrypted frames, which could result in sensitive data disclosure and possibly traffic manipulation. The advised Siemens products are only affected by some of the published vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

  • ICSA-26-111-07Siemens SCALANCE2026-04-14icsa · cisa_csaf_otUS

    SCALANCE W-700 IEEE 802.11n family before V6.6.0 are affected by multiple vulnerabilities. Siemens has released a new version for SCALANCE W-700 IEEE 802.11n family and recommends to update to the latest version.

  • ASB-A-1756268082021-10-01vendor · osvUS
07

also known as (7)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bduosvcert_bundncsc_nlsiemens_psirtcisco_csafcisa_csaf_otNVDCVE.orgMITRE
published 2021-05-11modified 2026-06-17
10

references (45)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan