CVE-2021-34173: Espressif ESP32 Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover.

Affected products

• Espressif ESP32 Firmware: up to and including 4.2

Published 2021-07-14. Last modified 2026-06-17.