CVE-2019-12588

2019-09-0412:15:11

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

JSON

The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.

CPENameOperatorVersion
arduinoeq2.7.0
arduinoeq2.2.1
arduinoeq2.6.3
arduinoeq2.5.0-beta1
arduinoeq2.4.2
arduinoeq2.4.0-rc2
arduinoeq2.7.2
arduinoeq3.1.0
arduinoeq3.0.4
arduinoeq2.3.0-rc1

Name	Operator	Version
arduino	eq	2.7.0
arduino	eq	2.2.1
arduino	eq	2.6.3
arduino	eq	2.5.0-beta1
arduino	eq	2.4.2
arduino	eq	2.4.0-rc2
arduino	eq	2.7.2
arduino	eq	3.1.0
arduino	eq	3.0.4
arduino	eq	2.3.0-rc1