CVE-2020-26145: Samsung Galaxy i9305 Firmware

Medium severity, CVSS 6.5. EPSS: 3.5% chance of exploitation in the next 30 days.

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Affected products

• Samsung Galaxy i9305 Firmware: version 4.4.4 only
• Siemens 6gk5763-1al00-3aa0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5763-1al00-3da0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5763-1al00-7da0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1ge00-3da0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1ge00-3db0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1ge00-7da0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1ge00-7db0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1ge00-7ta0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1ge00-7tb0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1je00-3da0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1je00-7da0 Firmware: before 1.2 (fixed in 1.2)
• Siemens 6gk5766-1je00-7ta0 Firmware: before 1.2 (fixed in 1.2)

Published 2021-05-11. Last modified 2026-06-17.