SSA-913875 V1.4 (Last Update: 2025-04-08): Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Risk Summary

<p>Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of <a href="https://www.fragattacks.com/">FragAttacks</a>, have been published.</p> <p>Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forge encrypted frames, which could result in sensitive data disclosure and possibly traffic manipulation.</p> <p>The advised Siemens products are only affected by some of the published vulnerabilities.</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)