CVE-2020-12638

An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK devices through 3.3. Broadcasting forged beacon frames forces a device to change its authentication mode to OPEN, effectively disabling its 802.11 encryption.

• CWE-287
• CWE-319

• https://github.com/espressif/ESP8266_NONOS_SDKThird Party Advisory
• https://github.com/espressif/ESP8266_RTOS_SDKThird Party Advisory
• https://github.com/espressif/esp-idfThird Party Advisory
• https://lbsfilm.at/blog/wpa2-authenticationmode-downgrade-in-espressif-microprocessorsExploit, Patch, Third Party Advisory
• https://github.com/espressif/ESP8266_NONOS_SDKThird Party Advisory
• https://github.com/espressif/ESP8266_RTOS_SDKThird Party Advisory
• https://github.com/espressif/esp-idfThird Party Advisory
• https://lbsfilm.at/blog/wpa2-authenticationmode-downgrade-in-espressif-microprocessorsExploit, Patch, Third Party Advisory

Published

Jul 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12626An issue was discovered in Roundcube Webmail before 1.4.4. A…6.5
• CVE-2020-12627Calibre-Web 0.6.6 allows authentication bypass because of th…9.8
• CVE-2020-12629include/class.sla.php in osTicket before 1.14.2 allows XSS v…5.4
• CVE-2020-1263An information disclosure vulnerability exists in the way Wi…5.5
• CVE-2020-12635XSS exists in the WebForms Pro M2 extension before 2.9.17 fo…6.1
• CVE-2020-12637Zulip Desktop before 5.2.0 has Missing SSL Certificate Valid…9.8
• CVE-2020-12639phpList before 3.5.3 allows XSS, with resultant privilege el…6.1
• CVE-2020-1264An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-12640Roundcube Webmail before 1.4.4 allows attackers to include l…9.8
• CVE-2020-12641rcube_image.php in Roundcube Webmail before 1.4.4 allows att…9.8
• CVE-2020-12642An issue was discovered in service-api before 4.3.12 and 5.x…7.5
• CVE-2020-12643OX App Suite 7.10.3 and earlier has Incorrect Access Control…4.3