PT-2024-4251 · Espressif · Esp-Idf

Elttam + 1 · Published 2024-03-25 · Updated 2025-12-05 · CVE-2024-28183

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ESP-IDF versions prior to 4.4.7 ESP-IDF versions prior to 5.2.1

Description A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discovered in the implementation of the ESP-IDF bootloader, which could allow an attacker with physical access to flash of the device to bypass anti-rollback protection. This attack can allow booting past a partition with a lower security version, even in the presence of a flash encryption scheme. The vulnerability requires carefully modifying the flash contents after the anti-rollback checks have been performed by the bootloader.

Recommendations For ESP-IDF versions prior to 4.4.7, update to version 4.4.7 or later. For ESP-IDF versions prior to 5.2.1, update to version 5.2.1 or later.

Exploit

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2024-04738

CVE-2024-28183

GHSA-22X6-3756-PFP8

Affected Products

Esp-Idf

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28183.json · Exploit
• https://github.com/espressif/esp-idf/commit/b2cdc0678965790f49afeb6e6b0737cd24433a05 · Patch
• https://github.com/espressif/esp-idf/commit/c33b9e1426121ce8cccf1a94241740be9cff68de · Patch
• https://github.com/espressif/esp-idf/commit/4c95aa445d4e84f01f86b6f3a552aa299276abf3 · Patch
• https://github.com/espressif/esp-idf/commit/3305cb4d235182067936f8e940e6db174e25b4b2 · Patch
• https://github.com/espressif/esp-idf/commit/534e3ad1fa68526a5f989fb2163856d6b7cd2c87 · Patch
• https://github.com/espressif/esp-idf/commit/f327ddf6adab0c28d395975785727b2feef57803 · Patch
• https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8 · Vendor Advisory
• https://github.com/espressif/esp-idf/commit/7003f1ef0dffc73c34eb153d1b0710babb078149 · Patch
• https://bdu.fstec.ru/vul/2024-04738 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-28183 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28183 · Vendor Advisory
• https://twitter.com/oktsec/status/1773576267557650510 · Twitter Post
• https://twitter.com/CVEnew/status/1772272149534838938 · Twitter Post
• https://vuldb.com/ru/?id.257881 · Note