Количество 3
Количество 3
CVE-2021-28139
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload.
GHSA-jr8m-qx83-r6p3
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload.
BDU:2021-04906
Уязвимость реализации Bluetooth Classic среды для разработки IoT приложений espressif esp-idf, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-28139 The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload. | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| GHSA-jr8m-qx83-r6p3 The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload. | 1% Низкий | больше 3 лет назад | |
 | BDU:2021-04906 Уязвимость реализации Bluetooth Classic среды для разработки IoT приложений espressif esp-idf, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу