CVE-2019-12586

CVE-2019-12586 affects Espressif ESP-IDF (2.0.0–4.0.0) and ESP8266_NONOS_SDK (2.2.0–3.1.0): the EAP peer processes EAP Success messages before any EAP method completion, enabling a radio‑range attacker to crash the device (DoS) via a crafted message. Red Hat and OSV entries confirm the same descr...

CVE-2019-12588

CVE-2019-12588 affects the Espressif ESP8266_NONOS_SDK 2.2.0–3.1.0, where the 802.11 MAC implementation fails to validate the RSN AuthKey suite list count in beacon frames, probe responses, and association responses. This can be exploited by an attacker in radio range to crash the device via a cr...

Cesanta Mongoose OS - Use-After-Free Vulnerability

Exploit for hardware platform in category dos / poc Product: Mongoose OS Vendor: Cesanta CVE ID: CVE-2017-7185 CSNC ID: CSNC-2017-003 Subject: Use-after-free / Denial of Service Risk: Medium Effect: Remotely exploitable Authors: Philipp Promeuschel Carel van Rooyen Stephan Sekula Date: 2017-04-03...

Cesanta Mongoose OS - Use-After-Free

Cesanta Mongoose OS - Use-After-Free COMPASS SECURITY ADVISORY https://www.compass-security.com/en/research/advisories/ Product: Mongoose OS Vendor: Cesanta CVE ID: CVE-2017-7185 CSNC ID: CSNC-2017-003 Subject: Use-after-free / Denial of Service Risk: Medium Effect: Remotely exploitable Authors:...