İçeriğe atla
Noroxi

espressif kayıtları

espressif üreticisine ait 46 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%21,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

46 kayıt
  • CVE-2026-42854
    39İzleyin

    arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE

    KritikCVSS 9,8İstismar yokEPSS %0

    espressif · arduino-esp3212 May 2026

  • CVE-2021-28139
    35İzleyin

    The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an L

    YüksekCVSS 8,8İstismar yokEPSS %1

    espressif · esp-idf7 Eyl 2021

  • CVE-2024-53406
    35İzleyin

    Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass.

    YüksekCVSS 8,8İstismar yokEPSS %0

    espressif · esp-idf13 Mar 2025

  • CVE-2022-24893
    35İzleyin

    Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

    YüksekCVSS 8,8İstismar yokEPSS %0

    espressif · esp-idf25 Haz 2022

  • CVE-2026-41429
    35İzleyin

    Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption

    YüksekCVSS 8,8İstismar yokEPSS %0

    espressif · arduino-esp3224 Nis 2026

  • CVE-2026-45328
    35İzleyin

    ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

    YüksekCVSS 8,8İstismar yokEPSS %0

    espressif · esp-idf9 Haz 2026

  • CVE-2024-33453
    32İzleyin

    Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    espressif · esp-idf17 Eki 2024

  • CVE-2019-12587
    32İzleyin

    The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a

    YüksekCVSS 8,1İstismar yokEPSS %0

    espressif · esp-idf4 Eyl 2019

  • CVE-2026-25532
    32İzleyin

    ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

    YüksekCVSS 8,0İstismar yokEPSS %0

    espressif · esp-idf4 Şub 2026

  • CVE-2021-34173
    30İzleyin

    An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame.

    YüksekCVSS 7,5İstismar yokEPSS %1

    espressif · esp32 firmware14 Tem 2021

  • CVE-2020-16146
    30İzleyin

    Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x through 4.0.1 has a Buf

    YüksekCVSS 7,5İstismar yokEPSS %1

    espressif · esp-idf11 Oca 2021

  • CVE-2021-41104
    30İzleyin

    web_server allows OTA update without checking user defined basic auth username & password

    YüksekCVSS 7,5İstismar yokEPSS %1

    esphome · esphome firmware28 Eyl 2021

  • CVE-2026-45541
    30İzleyin

    ESF-IDF: Remote Null Pointer Dereference in WebSocket Server

    YüksekCVSS 7,5İstismar yokEPSS %0

    espressif · esp-idf9 Haz 2026

  • CVE-2024-51428
    30İzleyin

    An issue in Espressif Esp idf v5.3.0 allows attackers to cause a Denial of Service (DoS) via a crafted data channel packet.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    espressif · esp-idf7 Kas 2024

  • CVE-2026-42855
    30İzleyin

    arduino-esp32: Digest authentication URI mismatch bypass in WebServer allows cross-resource replay attack

    YüksekCVSS 7,5İstismar yokEPSS %0

    espressif · arduino-esp3212 May 2026

  • CVE-2023-46894
    30İzleyin

    An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

    YüksekCVSS 7,5İstismar yokEPSS %0

    espressif · esptool9 Kas 2023

  • CVE-2025-52471
    28İzleyin

    ESP-NOW Integer Underflow Vulnerability Advisory

    YüksekCVSS 7,2İstismar yokEPSS %0

    espressif · esp-idf24 Haz 2025

  • CVE-2026-45542
    28İzleyin

    ESF-IDF: Heap buffer overflow in protocomm Security2 over Bluetooth

    YüksekCVSS 7,1İstismar yokEPSS %0

    espressif · esp-idf9 Haz 2026

  • CVE-2025-27840
    27İzleyin

    Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    espressif · esp32 firmware8 Mar 2025

  • CVE-2020-12638
    27İzleyin

    An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTO

    OrtaCVSS 6,8İstismar yokEPSS %0

    espressif · esp-idf23 Tem 2020

  • CVE-2019-15894
    27İzleyin

    An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1.

    OrtaCVSS 6,8İstismar yokEPSS %0

    espressif · esp-idf7 Eki 2019

  • CVE-2025-68622
    27İzleyin

    Espressif ESP-IDF USB Host UVC Class Driver has a stack buffer overflow in UVC descriptor printing

    OrtaCVSS 6,8İstismar yokEPSS %0

    espressif · usb host uvc class driver12 Oca 2026

  • CVE-2023-35818
    27İzleyin

    An issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices.

    OrtaCVSS 6,8İstismar yokEPSS %0

    espressif · esp32-d0wd-v3 firmware17 Tem 2023

  • CVE-2025-68656
    27İzleyin

    Espressif ESP-IDF USB Host HID (Human Interface Device) Driver Descriptor Use-After-Free Vulnerability

    OrtaCVSS 6,8İstismar yokEPSS %0

    espressif · usb host hid driver12 Oca 2026

  • CVE-2019-12586
    26İzleyin

    The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success message

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    espressif · arduino-esp324 Eyl 2019