CVE-2019-12587

creationtimestamp| type| source ---|---|--- 2019-09-07 19:19:32+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/947 2019-09-08 19:25:29+00:00| published-proof-of-concept| Telegram/0GL2HLFlH7purPAly9fE9htFJHCPdZf69GXFtJF8IKHA 2021-12-07 03:44:42+00:00| exploited|...

CVE-2019-12587

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266NONOSSDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key PMK after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames v...

CVE-2019-12587

The CVE-2019-12587 entry concerns the EAP peer implementation in Espressif ESP-IDF 2.0.0–4.0.0 and ESP8266_NONOS_SDK 2.2.0–3.1.0, where a zero PMK can be installed after any EAP authentication, enabling attackers in radio range to replay, decrypt, or spoof frames via a rogue AP. Red Hat and OSV r...