PT-2023-25332 · Espressif · Espressif Esp32

Published 2023-07-17 · Updated 2023-07-28 · CVE-2023-35818

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Espressif ESP32 version 3.0 (ESP32 rev300 ROM)

Description An issue was discovered that allows an attacker to influence the PC value at the CPU context level through an EMFI attack on ECO3, regardless of Secure Boot and Flash Encryption status. This capability can be used to exploit another behavior in the chip, gaining unauthorized access to the ROM download mode. Access to ROM download mode may be further exploited to read the encrypted flash content in cleartext format or execute stub code.

Recommendations For Espressif ESP32 version 3.0 (ESP32 rev300 ROM), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-35818

Affected Products

Espressif Esp32

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-35818 · Security Note
• https://espressif.com/sites/default/files/advisory_downloads/AR2023-005%20Security%20Advisory%20Concerning%20Bypassing%20Secure%20Boot%20and%20Flash%20Encryption%20Using%20EMFI%20EN.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-35818 · Vendor Advisory
• https://t.me/cibsecurity/66843 · Telegram Post
• https://espressif.com · Note