PT-2019-12876 · Espressif · Esp8266 Nonos Sdk+1

Published 2019-09-04 · Updated 2020-08-24 · CVE-2019-12587

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.0.0 through 4.0.0 Espressif ESP8266 NONOS SDK versions 2.2.0 through 3.1.0

Description The issue concerns the EAP peer implementation, allowing the installation of a zero Pairwise Master Key (PMK) after completing any EAP authentication method. This enables attackers within radio range to replay, decrypt, or spoof frames via a rogue access point.

Recommendations For Espressif ESP-IDF versions 2.0.0 through 4.0.0, update to a version that addresses this issue. For Espressif ESP8266 NONOS SDK versions 2.2.0 through 3.1.0, update to a version that addresses this issue. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to minimize the risk of exploitation via a rogue access point.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2019-12587

Affected Products

Esp-Idf

Esp8266 Nonos Sdk

References · 7

• 🔥 https://github.com/Matheus-Garbelini/esp32_esp8266_attacks · Exploit
• https://matheus-garbelini.github.io/home/post/zero-pmk-installation · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-12587 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12587 · Vendor Advisory
• https://t.me/github_repos/3385 · Telegram Post
• https://github.com/espressif · Note
• https://t.me/cybersecuritytechnologies/429 · Telegram Post