Description
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.
Metrics
CVSS 3.1 5.4/10
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Siemens | SCALANCE W1748-1 M12 | < V3.0.0 |
| Siemens | SCALANCE W1748-1 M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-1 M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-2 EEC M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-2 M12 | < V3.0.0 |
| Siemens | SCALANCE W1788-2IA M12 | < V3.0.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (USA) | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W738-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 M12 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W748-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W761-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 M12 EEC | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
| Siemens | SCALANCE W774-1 RJ45 | < V6.6.0 |
References
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing List, Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comProduct
- http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
- https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing List, Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
- https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
- https://www.fragattacks.comProduct
- https://cert-portal.siemens.com/productcert/html/ssa-019200.html
- https://cert-portal.siemens.com/productcert/html/ssa-913875.html
Timeline
- Published
- May 11, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified