Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-46894

Опубликовано: 09 нояб. 2023
Источник: debian
EPSS Низкий

Описание

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

Примечания

  • Bogus issue reported for esptool, also see

  • https://github.com/espressif/esptool/issues/926

  • Old revisions of one of the supported chipsets were using AES ECB for secure

  • boot and flash encryption, but newer ones have switched to newer cryptographic

  • algorithms. esptool keeps support for the older algorithms, in order to keep

  • the ability to work with older revisions of the hardware.

EPSS

Процентиль: 40%
0.0048
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 3 года назад

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

CVSS3: 3.3
redhat
почти 3 года назад

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

CVSS3: 7.5
nvd
почти 3 года назад

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

CVSS3: 7.5
github
почти 3 года назад

esptool allows attackers to view sensitive information via weak cryptographic algorithm

EPSS

Процентиль: 40%
0.0048
Низкий