CVE-2019-12588

Опубликовано: 04 сент. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 3.3

EPSS Низкий

Описание

The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.

Ссылки

https://github.com/Matheus-Garbelini/esp32_esp8266_attacks
Exploit
Third Party Advisory
https://github.com/espressif
Product
https://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/
Exploit
Third Party Advisory
https://github.com/Matheus-Garbelini/esp32_esp8266_attacks
Exploit
Third Party Advisory
https://github.com/espressif
Product
https://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:espressif:arduino_esp8266:*:*:*:*:*:*:*:*

Версия до 2.5.2 (включая)

cpe:2.3:a:espressif:esp8266_nonos_sdk:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 3.1.0 (включая)

EPSS

Процентиль: 39%

0.00175

Низкий

6.5 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-w5cj-7hxw-2355