CVE-2025-27840
CVE-2025-27840
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
CVSS 6.8 · Media · EPSS 1,4% · Código de explotación público
- Publicación
- Actualización
Productos y versiones afectados
esp32
- Versiones
- 2025-03-06: Afectada (custom)
Sin corrección publicada
Fuentes originales
- https://github.com/TarlogicSecurity/Talks/blob/main/2025_RootedCon_BluetoothTools.pdf
- https://x.com/pascal_gujer/status/1898442439704158276
- https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/
- https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/
- https://reg.rootedcon.com/cfp/schedule/talk/5
- https://flyingpenguin.com/?p=67838
- https://github.com/em0gi/CVE-2025-27840
- https://github.com/orgs/espruino/discussions/7699
- https://www.bleepingcomputer.com/news/security/undocumented-commands-found-in-bluetooth-chip-used-by-a-billion-devices/
- https://darkmentor.com/blog/esp32_non-backdoor/
- https://news.ycombinator.com/item?id=43308740
- https://news.ycombinator.com/item?id=43301369
- https://github.com/esphome/esphome/discussions/8382
- https://cheriot.org/auditing/backdoor/2025/03/09/no-esp32-style-backdoor.html
- https://www.espressif.com/en/news/Response_ESP32_Bluetooth
- https://nvd.nist.gov/vuln/detail/CVE-2025-27840