CVE-2020-13594

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map…

published August 31, 2020

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on reception, allowing attackers in radio range to cause a denial of service (crash) via a crafted packet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00813 · 56.6th percentile
Published
2020-08-31T14:58Z
EPSS history
Timeline
  • 31 AUG 14:58Z
    The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map…
    cvelistv5