PT-2021-9864 · Espressif · Esp-Idf

Lewei Qu · Published 2021-01-12 · Updated 2021-01-20 · CVE-2020-16146

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Espressif ESP-IDF versions 2.x through 4.0.1

Description The issue is a Buffer Overflow in BluFi provisioning, specifically in the btc blufi recv handler function in blufi prf.c. An attacker can exploit this by sending a crafted BluFi protocol Write Attribute command to characteristic 0xFF01, which can lead to a buffer overflow due to manipulated packet fields.

Recommendations For Espressif ESP-IDF versions 2.x through 4.0.1, consider disabling the btc blufi recv handler function in blufi prf.c as a temporary workaround until a patch is available. Restrict access to the BluFi provisioning module to minimize the risk of exploitation. Avoid using the characteristic 0xFF01 in the BluFi protocol until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-16146

Affected Products

Esp-Idf

References · 6

• 🔥 https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/CVE-2020-16146.md · Exploit
• https://osv.dev/vulnerability/CVE-2020-16146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16146 · Security Note
• https://github.com/espressif/esp-idf · Note
• https://t.me/cibsecurity/21920 · Telegram Post
• https://t.me/cvenotify/8421 · Telegram Post