CVE-2019-12588

Published September 4th, 2019

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

3.3

LOW

Affected

PROJECT

Description

The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.

Matheus-Garbelini/esp32_esp8266_attacks

Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)

GitHub

817