Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-27840
Analyzed
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-08 Mar, 2025 | 20:15
Updated At-12 Mar, 2025 | 14:58

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.16.8MEDIUM
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L
Primary3.16.8MEDIUM
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Type: Secondary
Version: 3.1
Base score: 6.8
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L
Type: Primary
Version: 3.1
Base score: 6.8
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CPE Matches
espressif
espressif
>>esp32_firmware>>-
cpe:2.3:o:espressif:esp32_firmware:-:*:*:*:*:*:*:*
espressif
espressif
>>esp32>>-
cpe:2.3:h:espressif:esp32:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-912Secondarycve@mitre.org
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: CWE-912
Type: Secondary
Source: cve@mitre.org
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://cheriot.org/auditing/backdoor/2025/03/09/no-esp32-style-backdoor.htmlcve@mitre.org
Third Party Advisory
Technical Description
https://darkmentor.com/blog/esp32_non-backdoor/cve@mitre.org
Exploit
Third Party Advisory
Technical Description
https://flyingpenguin.com/?p=67838cve@mitre.org
Third Party Advisory
Technical Description
https://github.com/TarlogicSecurity/Talks/blob/main/2025_RootedCon_BluetoothTools.pdfcve@mitre.org
Third Party Advisory
https://github.com/em0gi/CVE-2025-27840cve@mitre.org
Product
https://github.com/esphome/esphome/discussions/8382cve@mitre.org
Issue Tracking
https://github.com/orgs/espruino/discussions/7699cve@mitre.org
Issue Tracking
https://news.ycombinator.com/item?id=43301369cve@mitre.org
Issue Tracking
https://news.ycombinator.com/item?id=43308740cve@mitre.org
Issue Tracking
https://reg.rootedcon.com/cfp/schedule/talk/5cve@mitre.org
Third Party Advisory
https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/cve@mitre.org
Exploit
Press/Media Coverage
https://www.bleepingcomputer.com/news/security/undocumented-commands-found-in-bluetooth-chip-used-by-a-billion-devices/cve@mitre.org
Exploit
Press/Media Coverage
https://www.espressif.com/en/news/Response_ESP32_Bluetoothcve@mitre.org
Press/Media Coverage
https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/cve@mitre.org
Third Party Advisory
https://x.com/pascal_gujer/status/1898442439704158276cve@mitre.org
Third Party Advisory
Hyperlink: https://cheriot.org/auditing/backdoor/2025/03/09/no-esp32-style-backdoor.html
Source: cve@mitre.org
Resource:
Third Party Advisory
Technical Description
Hyperlink: https://darkmentor.com/blog/esp32_non-backdoor/
Source: cve@mitre.org
Resource:
Exploit
Third Party Advisory
Technical Description
Hyperlink: https://flyingpenguin.com/?p=67838
Source: cve@mitre.org
Resource:
Third Party Advisory
Technical Description
Hyperlink: https://github.com/TarlogicSecurity/Talks/blob/main/2025_RootedCon_BluetoothTools.pdf
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: https://github.com/em0gi/CVE-2025-27840
Source: cve@mitre.org
Resource:
Product
Hyperlink: https://github.com/esphome/esphome/discussions/8382
Source: cve@mitre.org
Resource:
Issue Tracking
Hyperlink: https://github.com/orgs/espruino/discussions/7699
Source: cve@mitre.org
Resource:
Issue Tracking
Hyperlink: https://news.ycombinator.com/item?id=43301369
Source: cve@mitre.org
Resource:
Issue Tracking
Hyperlink: https://news.ycombinator.com/item?id=43308740
Source: cve@mitre.org
Resource:
Issue Tracking
Hyperlink: https://reg.rootedcon.com/cfp/schedule/talk/5
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/
Source: cve@mitre.org
Resource:
Exploit
Press/Media Coverage
Hyperlink: https://www.bleepingcomputer.com/news/security/undocumented-commands-found-in-bluetooth-chip-used-by-a-billion-devices/
Source: cve@mitre.org
Resource:
Exploit
Press/Media Coverage
Hyperlink: https://www.espressif.com/en/news/Response_ESP32_Bluetooth
Source: cve@mitre.org
Resource:
Press/Media Coverage
Hyperlink: https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-devices/
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: https://x.com/pascal_gujer/status/1898442439704158276
Source: cve@mitre.org
Resource:
Third Party Advisory
Change History
0Changes found
Details not found