PT-2021-4307 · Espressif · Espressif Esp-Idf

Published 2021-09-07 · Updated 2022-07-12 · CVE-2021-28135

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 4.4 and earlier

Description The issue arises from insufficient input validation in the Bluetooth Classic implementation, allowing a remote attacker to cause a denial of service by flooding the target device with LMP Feature Response data. This can trigger a crash in ESP32 devices. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Espressif ESP-IDF versions 4.4 and earlier, consider disabling the Bluetooth Classic implementation until a patch is available to prevent exploitation. Restrict access to the LMP Feature Response data to minimize the risk of denial of service attacks. Avoid using the LMP Feature Response data in the affected Bluetooth Classic implementation until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2021-04916

CVE-2021-28135

Affected Products

Espressif Esp-Idf

References · 9

• https://osv.dev/vulnerability/CVE-2021-28135 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04916 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-28135 · Security Note
• https://github.com/espressif/esp-idf · Note
• https://github.com/espressif/esp32-bt-lib · Note
• https://cybersecurity-help.cz/vdb/SB2021090603 · Note
• https://espressif.com/en/products/socs/esp32 · Note
• https://dl.packetstormsecurity.net/papers/general/braktooth.pdf · Note
• https://t.me/cvenotify/20778 · Telegram Post