CVE-2019-12587
PoC —CVSS 3.0
8.1 high
EPSS
<1%p57
Published
()
Modified
Description
The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point.
- Vendors
- espressif
- Products
- esp-idf, esp8266 nonos sdk
- Weakness
- CWE-327
- Vector
- CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.