Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6fg6-6393-xqhq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset.

An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset.

EPSS

Процентиль: 36%
0.00155
Низкий

Связанные уязвимости

CVSS3: 4.6
nvd
около 6 лет назад

An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset.

CVSS3: 4.6
fstec
около 6 лет назад

Уязвимость загрузчика первого этапа Secure Boot микропрограммного обеспечения микроконтроллеров ESP32, позволяющая нарушителю получить ключи безопасной загрузки

EPSS

Процентиль: 36%
0.00155
Низкий