Espressif Esp8266 Nonos Sdk — known CVE vulnerabilities

Every CVE whose affected-product data names Espressif Esp8266 Nonos Sdk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-12587 — CVSS 8.1 (high): The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a…
• CVE-2020-12638 — CVSS 6.8 (medium): An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and…
• CVE-2019-12586 — CVSS 6.5 (medium): The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success…
• CVE-2019-12588 — CVSS 6.5 (medium): The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite…