Esp32 Firmware
by Espressif
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-34173 | Hig | 0.49 | 7.5 | 0.01 | Jul 14, 2021 | An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover. | ||
| CVE-2025-27840 | Med | 0.44 | 6.8 | 0.01 | Mar 8, 2025 | Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory). |
- risk 0.49cvss 7.5epss 0.01
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover.
- risk 0.44cvss 6.8epss 0.01
Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).