← Database

CVE-2024-53406

HIGH CVSS: 8.8 Published: 2025-03-13 Modified: 2026-06-17

Description

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. In the reconnection phase, the device reuses the session key from a previous connection session, creating an opportunity for attackers to execute security bypass attacks.

Affected Platforms

Espressif Esp-Idf

Weakness Type

CWE-639

References