Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-09-04	CVE-2019-12588	Improper Input Validation vulnerability in Espressif Arduino Esp8266 and Esp8266 Nonos SDK The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message. low complexity espressif CWE-20	6.5
2019-05-13	CVE-2018-18558	Improper Input Validation vulnerability in Espressif Esp-Idf An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. high complexity espressif CWE-20	6.4