An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 11, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-devel | May 25, 2022 | May 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade perf | Apr 11, 2022 | May 11, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 23, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 10, 2021 | May 11, 2021 |
| Sonicwall Sonicos | — | Update SonicWall SonicOS Gen7 to version 7.0.1-5024 or later | May 25, 2026 | May 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub