Medium 6.5Published May 11, 2021

CVE-2020-26144An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices.

Updated under an hour ago (Oct 28, 2026, 4:10 AM ET)

Does this affect you?

It affects Siemens SCALANCE W721-1 RJ45 and 48 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Siemens SCALANCE W721-1 RJ45

Exploited in the last 30 days

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

CVSS: 6.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: mitre
NVD analysis: Modified
Record last updated: Oct 8, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Siemens SCALANCE W721-1 RJ45 siemens:scalance_w721_1_rj45 (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W722-1 RJ45 siemens:scalance_w722_1_rj45 (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W734-1 RJ45 siemens:scalance_w734_1_rj45 (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W734-1 RJ45 (USA) siemens:scalance_w734_1_rj45_usa (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W738-1 M12 siemens:scalance_w738_1_m12 (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W748-1 M12 siemens:scalance_w748_1_m12 (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W748-1 RJ45 siemens:scalance_w748_1_rj45 (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W761-1 RJ45 siemens:scalance_w761_1_rj45 (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W774-1 M12 EEC siemens:scalance_w774_1_m12_eec (from the name)	before V6.6.0	CISA ADP
Siemens SCALANCE W774-1 RJ45 siemens:scalance_w774_1_rj45 (from the name)	before V6.6.0	CISA ADP
1–10 of 49

References

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu	vendor-advisory, x-refsource-cisco
https://www.fragattacks.com	x-refsource-misc
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md	x-refsource-misc
http://www.openwall.com/lists/oss-security/2021/05/11/12	mailing-list, x-refsource-mlist
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf	x-refsource-confirm
https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63	x-refsource-misc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.