Lucene search

K
EspressifEsp-idf

18 matches found

CVE
CVE
added 2024/12/12 2:15 a.m.2429 views

CVE-2024-53845

ESPTouch is a connection protocol for internet of things devices. In the ESPTouchV2 protocol, while there is an option to use a custom AES key, there is no option to set the IV (Initialization Vector) prior to versions 5.3.2, 5.2.4, 5.1.6, and 5.0.8. The IV is set to zero and remains constant throu...

8.7CVSS6.8AI score0.00159EPSS
CVE
CVE
added 2019/09/04 8:15 p.m.208 views

CVE-2019-12586

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or failure, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.

6.5CVSS6.4AI score0.03703EPSS
CVE
CVE
added 2019/09/04 12:15 p.m.125 views

CVE-2019-12587

The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames...

8.1CVSS8AI score0.00106EPSS
CVE
CVE
added 2021/09/07 6:15 a.m.55 views

CVE-2021-28135

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data.

6.5CVSS6.5AI score0.00169EPSS
CVE
CVE
added 2020/08/31 3:15 p.m.53 views

CVE-2020-13595

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of completed BLE packets and triggers a reachable assertion on the host stack when receiving a packet with an MIC failure. An attacker within radio range can si...

6.5CVSS6.3AI score0.00033EPSS
CVE
CVE
added 2021/09/07 7:15 a.m.53 views

CVE-2021-28139

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield pa...

8.8CVSS8.7AI score0.00314EPSS
CVE
CVE
added 2024/03/25 3:15 p.m.50 views

CVE-2024-28183

ESP-IDF is the development framework for Espressif SoCs supported on Windows, Linux and macOS. A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discovered in the implementation of the ESP-IDF bootloader which could allow an attacker with physical access to flash of the device to bypass ant...

6.1CVSS6.1AI score0.00033EPSS
CVE
CVE
added 2021/09/07 6:15 a.m.46 views

CVE-2021-28136

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption (and consequently a crash) in ESP32 via a replaye...

6.5CVSS6.5AI score0.00204EPSS
CVE
CVE
added 2022/06/25 7:15 a.m.46 views

CVE-2022-24893

ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK (ESP-BLE-MESH), a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...

8.8CVSS8.2AI score0.00109EPSS
CVE
CVE
added 2019/10/07 4:15 p.m.44 views

CVE-2019-15894

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code from...

7.2CVSS7.1AI score0.00044EPSS
CVE
CVE
added 2024/10/17 10:15 p.m.44 views

CVE-2024-33453

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component.

8.1CVSS6.5AI score0.01078EPSS
CVE
CVE
added 2021/01/12 3:15 a.m.40 views

CVE-2020-16146

Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buffer Overflow in BluFi provisioning in btc_blufi_recv_handler function in blufi_prf.c. An attacker can send a crafted BluFi protocol Write Attribute command to ...

7.5CVSS7.7AI score0.00354EPSS
CVE
CVE
added 2020/07/23 4:15 p.m.36 views

CVE-2020-12638

An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK devices through 3.3. Broadcasting forged beacon frames forces a device to change its authentication mode to OPEN, effectively disabling its 802.11 encryp...

6.8CVSS6.7AI score0.0004EPSS
CVE
CVE
added 2025/03/13 5:15 p.m.36 views

CVE-2024-53406

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. In the reconnection phase, the device reuses the session key from a previous connection session, creating an opportunity for attackers to execute security bypass attacks.

8.8CVSS7.4AI score0.00103EPSS
CVE
CVE
added 2019/05/13 1:29 p.m.30 views

CVE-2018-18558

An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker to bypass secure boot checks and execute arbitrary code, by crafting an application binary that over...

6.9CVSS6.7AI score0.00036EPSS
CVE
CVE
added 2020/08/31 3:15 p.m.28 views

CVE-2020-13594

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted pack...

6.5CVSS6.2AI score0.00122EPSS
CVE
CVE
added 2024/05/14 3:37 p.m.26 views

CVE-2024-33454

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component.

6.5CVSS7.8AI score0.00766EPSS
CVE
CVE
added 2025/06/24 8:15 p.m.5 views

CVE-2025-52471

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. An integer underflow vulnerability has been identified in the ESP-NOW protocol implementation within the ESP Wi-Fi component of versions 5.4.1, 5.3.3, 5.2.5, and 5.1.6 of the ESP-IDF framework. This issue stems from insufficie...

9.2CVSS8.1AI score0.00363EPSS