CVE-2019-12588
- Source
- https://cve.org/CVERecord?id=CVE-2019-12588
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-12588.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-12588
- Published
- 2019-09-04T12:15:11.107Z
- Modified
- 2026-02-11T11:43:41.848985Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The client 802.11 mac implementation in Espressif ESP8266NONOSSDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.
- References
Affected packages
Git / github.com/esp8266/arduino
Affected ranges
- Type
- GIT
- Repo
- https://github.com/esp8266/arduino
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affectedIntroducedLast affected