CVE:CVE-2020-12638
CNNVD:CNNVD-202007-1404
Espressif ESP-IDF等都是中国乐鑫信息科技（Espressif）公司的产品。Espressif ESP-IDF是一款物联网开发框架。Espressif ESP8266_NONOS_SDK是一款软件开发工具包。Espressif ESP8266_RTOS_SDK是一款软件开发工具包。
Espressif ESP-IDF 4.2及之前版本、ESP8266_NONOS_SDK 3.0.3及之前版本和ESP8266_RTOS_SDK 3.3及之前版本中存在安全漏洞。攻击者可利用该漏洞更改身份验证模式，从而禁用802.11加密。
solution:Upgrade espressif esp-idf to a higher version than 4.2,and avoid the version (,4.2]; Upgrade espressif esp8266_nonos_sdk to a higher version than 3.0.3,and avoid the version (,3.0.3]; Upgrade espressif esp8266_rtos_sdk to a higher version than 3.3,and avoid the version (,3.3]