Denial of Service Vulnerability in Espressif ESP8266 Wireless SDK
CVE-2019-12588

6.5MEDIUM

Key Information:

Vendor: Espressif
Status: Esp8266 Nonos Sdk; Arduino Esp8266
Vendor: CVE Published:; 4 September 2019

What is CVE-2019-12588?

The client implementation of 802.11 MAC layer in Espressif ESP8266_NONOS_SDK versions 2.2.0 to 3.1.0 is vulnerable due to improper validation of the RSN AuthKey suite list count found in beacon frames, probe responses, and association responses. This flaw enables attackers within radio range to send specially crafted messages, which can lead to a denial of service by crashing the device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch