CVE-2025-27840

MEDIUM 6.8EPSS 1.3%

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

CVSS v3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L
EPSS: 1.34% chance of exploitation in the next 30 days, 69th percentile
Published: 2025-03-08
Updated: 2025-05-12

Proof-of-concept exploits (3)

demining/Bluetooth-Attacks-CVE-2025-2784012★ · 2025-03-30
em0gi/CVE-2025-2784011★ · 2025-03-09
ladyg00se/CVE-2025-27840-WIP0★ · 2025-04-08

References

Related