PT-2019-14458 · Espressif · Esp-Idf+1

Santiago Cordoba Pellicer + 1 · Publicado 2019-10-07 · Atualizado 2026-04-15 · CVE-2019-15894

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1

Description An issue allows an attacker to bypass the Secure Boot digest verification at startup using fault injection to physically disrupt the ESP32 CPU, enabling the booting of unverified code from flash. The impact is minimized if the ESP32 is configured with both Secure Boot and Flash Encryption. However, without Flash Encryption, successful fault injection can lead to arbitrary code execution.

Recommendations For versions 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1, to protect against this attack, a firmware change must be made to permanently enable Flash Encryption in the field if it is not already permanently enabled.

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2019-15894

Produtos afetados

Esp-Idf

Esp32

Referências · 4

• https://espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_Boot · Aviso do Fabricante
• https://reddit.com/r/IOT/comments/1slty6n/bluetooth_on_iot_devices · Publicação no Reddit
• https://nvd.nist.gov/vuln/detail/CVE-2019-15894 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-15894 · Aviso do Fabricante