The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains an undocumented “backdoor” that could be leveraged for attacks.
The undocumented commands allow spoofing of trusted devices, unauthorized data access, pivoting to other devices on the network, and potentially establishing long-term persistence..
“Exploitation of this backdoor would allow hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls.”..
The issue is now tracked under CVE-2025-27840
-
Undocumented “backdoor” found in Bluetooth chip used by a billion devices
- This topic has 2 replies, 2 voices, and was last updated 2 months, 2 weeks ago.
AuthorViewing 1 reply threadAuthorViewing 1 reply thread