← back
CVE-2019-12588

CVE-2019-12588

EPSS 1.2%
The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/espressifhttps://github.com/Matheus-Garbelini/esp32_esp8266_attackshttps://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/