Vulnerabilities > CVE-2021-28135 - Unspecified vulnerability in Espressif Esp-Idf

CVSS 6.5 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

low complexity

espressif

NVD

Published: 2021-09-07

Updated: 2022-07-12

Summary

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data.

Vulnerable Configurations

Part	Description	Count
Application	Espressif Espressif ESP IDF 0.9 Espressif ESP IDF 1.0 Espressif ESP IDF 2.0 Espressif ESP IDF 2.0.0 Espressif ESP IDF 2.1 Espressif ESP IDF 2.1.1 Espressif ESP IDF 3.0 Espressif ESP IDF 3.0.1 Espressif ESP IDF 3.0.2 Espressif ESP IDF 3.0.3 Espressif ESP IDF 3.0.4 Espressif ESP IDF 3.0.5 Espressif ESP IDF 3.0.6 Espressif ESP IDF 3.0.7 Espressif ESP IDF 3.0.8 Espressif ESP IDF 3.0.9 Espressif ESP IDF 3.1 Espressif ESP IDF 3.1.1 Espressif ESP IDF 3.1.2 Espressif ESP IDF 3.1.3 Espressif ESP IDF 3.1.4 Espressif ESP IDF 3.1.5 Espressif ESP IDF 3.1.6 Espressif ESP IDF 3.1.7 Espressif ESP IDF 3.2 Espressif ESP IDF 3.2.1 Espressif ESP IDF 3.2.2 Espressif ESP IDF 3.2.3 Espressif ESP IDF 3.3 Espressif ESP IDF 3.3.1 Espressif ESP IDF 3.3.2 Espressif ESP IDF 3.3.3 Espressif ESP IDF 3.3.4 Espressif ESP IDF 4.0 Espressif ESP IDF 4.0.0 Espressif ESP IDF 4.0.1 Espressif ESP IDF 4.0.2 Espressif ESP IDF 4.0.3 Espressif ESP IDF 4.1 Espressif ESP IDF 4.1.1 Espressif ESP IDF 4.1.2 Espressif ESP IDF 4.1.3 Espressif ESP IDF 4.2 Espressif ESP IDF 4.2.1 Espressif ESP IDF 4.2.2 Espressif ESP IDF 4.2.3 Espressif ESP IDF 4.3 Espressif ESP IDF 4.3.2 Espressif ESP IDF 4.4	85

Summary

Vulnerable Configurations

References