CVE-2024-53406

8.8 highEPSS 0.6%

High (8.8) in espressif esp-idf. EPSS 0.6% chance of exploitation in the next 30 days.

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. In the reconnection phase, the device reuses the session key from a previous connection session, creating an opportunity for attackers to execute security bypass attacks.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2025-03-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

espressif:esp-idf

References

https://github.com/espressif/esp-idf
https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Esp/sk_reuse.md

Check your stack JSON