esp32_esp8266_attacks

Ataques Wi-Fi en ESP32/ESP8266 Este repositorio es parte del resultado de una investigación delASSET Research Group. Este repositorio demuestra 3 ataques Wi-Fi contra los populares dispositivos IoT ESP32/8266: Zero PMK Installation CVE-2019-12587 - Secuestro de clientes ESP32/ESP8266 conectados a...

CVE-2019-12587

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266NONOSSDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key PMK after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames v...

Authentication flaw

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266NONOSSDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key PMK after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames v...