feedc0de/esp-idf
1
0
Fork 0
forked from espressif/esp-idf
Code Pull Requests Activity

Merge branch 'bugfix/add_cve_2024_53845_to_list' into 'master'

Browse Source 
fix(wifi): Added CVE-2024-53845 to vulnerabilities list

See merge request espressif/esp-idf!35581
This commit is contained in:
Mahavir Jain
2024-12-12 18:21:08 +08:00
parent 1b633068fd 4784b5aad8
commit 9d45beda54
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/en/security/vulnerabilities.rst
View File

@@ -10,6 +10,17 @@ This page briefly lists all of the vulnerabilities that are discovered and fixed
CVE-2024
--------
CVE-2024-53845
~~~~~~~~~~~~~~
AES/CBC Constant IV Vulnerability in ESPTouch v2
* Espressif Advisory: NA (Published on GitHub)
* Impact: Applicable for ESP-IDF
* Resolution: Please see advisory for details
* Advisory pointer: `GHSA-wm57-466g-mhrr`_
CVE-2024-30949
~~~~~~~~~~~~~~
@@ -183,3 +194,4 @@ Security Advisory Concerning Wi-Fi Authentication Bypass
.. _`AR2024-003`: https://www.espressif.com/sites/default/files/advisory_downloads/AR2024-003%20Security%20Advisory%20for%20PEAP%20Phase-2%20authentication%20EN.pdf
.. _`GHSA-22x6-3756-pfp8` : https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8
.. _`GHSA-7f7f-jj2q-28wm` : https://github.com/espressif/esp-idf/security/advisories/GHSA-7f7f-jj2q-28wm
.. _`GHSA-wm57-466g-mhrr` : https://github.com/espressif/esp-idf/security/advisories/GHSA-wm57-466g-mhrr