An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 11, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools | May 25, 2022 | May 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel | Apr 11, 2022 | May 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 23, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 10, 2021 | May 11, 2021 |
| Sonicwall Sonicos | — | Update SonicWall SonicOS Gen7 to version 7.0.1-5024 or later | May 25, 2026 | May 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub