Vulnerability in Espressif Esp32 Firmware

CVE-2021-34173

An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS 0.015, 74.0th percentile (scored ); unchanged over 30 days. About EPSS.

Affected products

Public exploits and proof-of-concept code

Also mentioned in 4 other repositories (alipay/Owfuzz, ARPSyndicate/cvemon, E7mer/Owfuzz, …). These reference the CVE in a list, notes or a scanner and are not exploit code for it.

References