CVE-2019-12588 The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite li
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2019-12588?
CVE-2019-12588 is a medium-severity vulnerability in n/a, published on 4 Sep 2019.
Official description
The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.
Weakness: CWE-20
Which versions are affected by CVE-2019-12588?
It affects 2 products.
Products include Espressif Arduino Esp8266, Espressif Esp8266 Nonos Sdk.
How do I fix CVE-2019-12588?
No fix has been published for CVE-2019-12588 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-12588 being exploited?
There is no known exploitation of CVE-2019-12588 in the wild and no public exploit code.
Sources
Also known as GHSA-w5cj-7hxw-2355.