esp32_esp8266_attacks

Ataques Wi-Fi en ESP32/ESP8266 Este repositorio es parte del resultado de una investigación delASSET Research Group. Este repositorio demuestra 3 ataques Wi-Fi contra los populares dispositivos IoT ESP32/8266: Zero PMK Installation CVE-2019-12587 - Secuestro de clientes ESP32/ESP8266 conectados a...

CVE-2019-12587

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266NONOSSDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key PMK after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames v...

Authentication flaw

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266NONOSSDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key PMK after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames v...

CVE-2019-12587: Use of a Broken or Risky Cryptographic Algorithm

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266NONOSSDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key PMK after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames v...

PT-2019-12876

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.0.0 through 4.0.0 Espressif ESP8266 NONOS SDK versions 2.2.0 through 3.1.0 Description The issue concerns the EAP peer implementation, allowing the installation of a zero Pairwise Master Key PMK after completing an...