CVE-2024-33453

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component...

CVE-2024-33453

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component...

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

Details have emerged about multiple security vulnerabilities in two implementations of the Manufacturing Message Specification MMS protocol that, if successfully exploited, could have severe impacts in industrial environments. "The vulnerabilities could allow an attacker to crash an industrial...

CVE-2024-33070

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33070 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33070 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33070

CVE-2024-33070 corresponds to a transient denial-of-service arising when parsing the ESP Information Element in beacon/probe frames, reported for Qualcomm WLAN chipsets. Several connected sources describe it as a buffer over-read in WLAN host communication related to ESP IE parsing. The available...

CVE-2024-42483

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42484

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483 ESP-NOW Replay Attacks Vulnerability

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered in the implementation of the ESP-NOW because the caches is not differentiated by message types, it is a single, shared resource for all kinds of messages, whether they are...

CVE-2024-42483

ESP-NOW replay attacks vulnerability in its implementation arises because the cache is shared for all message types (broadcast, unicast, ciphertext, plaintext) and is not differentiated by type. Affected: ESP-NOW component (ESP32/ESP-NOW protocol). Impact: attacker could clear legitimate entries ...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

CVE-2024-42484

CVE-2024-42484 affects the ESP-NOW component, where the group-type message handling fails to validate the addrs_num field. This omission allows a crafted group message to be larger than the allocated buffer, causing memory corruption. The vulnerability is rooted in the mismatch between addrs_num ...

CVE-2024-42484 ESP-NOW OOB Vulnerability In Group Type Message

ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type message because there is no check for the addrsnum field of the group type message. This can result in memory corruption relat...

PT-2024-29981 · Espressif · Esp-Now

Name of the Vulnerable Software and Affected Versions: ESP-NOW Component affected versions not specified Description: The ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound OOB vulnerability was discovered in the implementation of the ESP-NOW group type...

PT-2024-29980 · Espressif · Esp-Now

Name of the Vulnerable Software and Affected Versions: ESP-NOW versions prior to 2.5.2 Description: A replay attacks vulnerability was discovered in the ESP-NOW Component, which provides a connectionless Wi-Fi communication protocol. The issue arises because the cache is not differentiated by...

QEMU before 8.2.0 has an integer underflow and resultant buffer overflow via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

...