PT-2019-14458 · Espressif · Esp-Idf+1

Santiago Cordoba Pellicer + 1 · Published 2019-10-07 · Updated 2026-04-15 · CVE-2019-15894

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1

Description An issue allows an attacker to bypass the Secure Boot digest verification at startup using fault injection to physically disrupt the ESP32 CPU, enabling the booting of unverified code from flash. The impact is minimized if the ESP32 is configured with both Secure Boot and Flash Encryption. However, without Flash Encryption, successful fault injection can lead to arbitrary code execution.

Recommendations For versions 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1, to protect against this attack, a firmware change must be made to permanently enable Flash Encryption in the field if it is not already permanently enabled.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2019-15894

Affected Products

Esp-Idf

Esp32

References · 4

• https://espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_Boot · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15894 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15894 · Vendor Advisory
• https://reddit.com/r/IOT/comments/1slty6n/bluetooth_on_iot_devices · Reddit Post