An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 11, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf | May 25, 2022 | May 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Apr 11, 2022 | May 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 23, 2021 | May 11, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 10, 2021 | May 11, 2021 |
| Sonicwall Sonicos | — | Update SonicWall SonicOS Gen7 to version 7.0.1-5024 or later | May 25, 2026 | May 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub