PT-2020-13177

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions through 4.2 ESP8266 NONOS SDK versions through 3.0.3 ESP8266 RTOS SDK versions through 3.3 Description An encryption-bypass issue allows broadcasting of forged beacon frames to force a device to change its...

CVE-2019-12588

CVE-2019-12588 affects the Espressif ESP8266_NONOS_SDK 2.2.0–3.1.0, where the 802.11 MAC implementation fails to validate the RSN AuthKey suite list count in beacon frames, probe responses, and association responses. This can be exploited by an attacker in radio range to crash the device via a cr...

PT-2019-12877

Name of the Vulnerable Software and Affected Versions Espressif ESP8266 NONOS SDK versions 2.2.0 through 3.1.0 Description The issue is related to the client 802.11 mac implementation, which does not correctly validate the RSN AuthKey suite list count in certain frames. This allows attackers with...

PT-2019-12876

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.0.0 through 4.0.0 Espressif ESP8266 NONOS SDK versions 2.2.0 through 3.1.0 Description The issue concerns the EAP peer implementation, allowing the installation of a zero Pairwise Master Key PMK after completing an...