CVE-2025-27840

Katalog CVE

CVSS 6.8 · Medium EPSS 1,4%

Kerentanan Hidden Functionality pada espressif esp32 firmware. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Rincian

Terbit di NVD

8 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.8 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-912: Hidden Functionality

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 70,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cheriot.org/auditing/backdoor/2025/03/09/no-esp32-style-backdoor.html deskripsi teknis · advisory pihak ketiga
• https://darkmentor.com/blog/esp32_non-backdoor/ exploit · deskripsi teknis · advisory pihak ketiga
• https://flyingpenguin.com/?p=67838 deskripsi teknis · advisory pihak ketiga
• https://github.com/TarlogicSecurity/Talks/blob/main/2025_RootedCon_BluetoothTools.pdf advisory pihak ketiga
• https://reg.rootedcon.com/cfp/schedule/talk/5 advisory pihak ketiga
• https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/ advisory pihak ketiga
• https://x.com/pascal_gujer/status/1898442439704158276 advisory pihak ketiga
• https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion... exploit · press/media coverage
• https://www.bleepingcomputer.com/news/security/undocumented-commands-found-in-bluetooth-chip-used-by-a-billion... exploit · press/media coverage
• https://github.com/em0gi/CVE-2025-27840 product
• https://github.com/esphome/esphome/discussions/8382 issue tracking
• https://github.com/orgs/espruino/discussions/7699 issue tracking
• https://news.ycombinator.com/item?id=43301369 issue tracking
• https://news.ycombinator.com/item?id=43308740 issue tracking
• https://www.espressif.com/en/news/Response_ESP32_Bluetooth press/media coverage