Lucene search
+L

CVE-2019-12587

🗓️ 04 Sep 2019 11:31:48Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 188 Views

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for CVE-2019-12586
3 Sep 201915:08
–githubexploit
circl
Circl
CVE-2019-12587
7 Sep 201919:19
–circl
cvelist
Cvelist
CVE-2019-12587
4 Sep 201911:31
–cvelist
euvd
EUVD
EUVD-2019-4181
7 Oct 202500:30
–euvd
kitploit
Kitploit
esp32_esp8266_attacks
10 Oct 202607:28
–kitploit
nvd
NVD
CVE-2019-12587
4 Sep 201912:15
–nvd
osv
OSV
CVE-2019-12587
4 Sep 201912:15
–osv
prion
Prion
Authentication flaw
4 Sep 201912:15
–prion
ptsecurity
Positive Technologies
PT-2019-12876
4 Sep 201900:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2019-12587: Use of a Broken or Risky Cryptographic Algorithm
4 Sep 201900:00
–rapid7
Rows per page
NVD
Node
OR
espressifesp-idfRange2.0.0–4.0.0
espressifesp8266_nonos_sdkRange2.2.0–3.1.0

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:14Current
8High risk
Vulners AI Score8
CVSS 24.8
CVSS 38.1
EPSS0.00875
188