blackbeard420/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf synced 2025-03-09 17:19:09 -04:00
Code Issues Projects Releases Wiki Activity

fix(wifi): Added CVE-2024-53845 to vulnerabilities list

Browse Source
This commit is contained in:
zhangyanjiao 2024-12-11 17:56:01 +08:00
parent a8691924a4
commit 4784b5aad8
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/en/security/vulnerabilities.rst
View File

@ -10,6 +10,17 @@ This page briefly lists all of the vulnerabilities that are discovered and fixed
CVE-2024
--------
CVE-2024-53845
~~~~~~~~~~~~~~
AES/CBC Constant IV Vulnerability in ESPTouch v2
* Espressif Advisory: NA (Published on GitHub)
* Impact: Applicable for ESP-IDF
* Resolution: Please see advisory for details
* Advisory pointer: `GHSA-wm57-466g-mhrr`_
CVE-2024-30949
~~~~~~~~~~~~~~
@ -183,3 +194,4 @@ Security Advisory Concerning Wi-Fi Authentication Bypass
.. _`AR2024-003`: https://www.espressif.com/sites/default/files/advisory_downloads/AR2024-003%20Security%20Advisory%20for%20PEAP%20Phase-2%20authentication%20EN.pdf
.. _`GHSA-22x6-3756-pfp8` : https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8
.. _`GHSA-7f7f-jj2q-28wm` : https://github.com/espressif/esp-idf/security/advisories/GHSA-7f7f-jj2q-28wm
.. _`GHSA-wm57-466g-mhrr` : https://github.com/espressif/esp-idf/security/advisories/GHSA-wm57-466g-mhrr