Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-28139
HistorySep 07, 2021 - 7:15 a.m.

Design/Logic Flaw

2021-09-0707:15:00
PRIOn knowledge base
www.prio-n.com
4

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload.

CPENameOperatorVersion
esp-idfle4.4

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

Related for PRION:CVE-2021-28139