6.8
CVSSv3

CVE-2025-27840

CVSSv4: NA | CVSSv3: 6.8 | CVSSv2: NA | VMScore: 780 | EPSS: 0.00066 | KEV: Not Included
Published: 08/03/2025 Updated: 10/03/2025

Vulnerability Summary

Undocumented Bluetooth HCI Memory Write Command Vulnerability in Espressif ESP32

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

espressif esp32

Github Repositories

Config files for my GitHub profile.

😈 Bienvenue sur mon GitHub ! πŸ‘Ύ Passionné par la cybersécurité et le développement 🌟 Toujours en train d'expérimenter de nouveaux outils πŸš€ Voici un aperçu de mes projets GitHub !

A Work-In-Progress for CVE-2025-27840

CVE-2025-27840-WIP A Work-In-Progress for CVE-2025-27840 CVE-2025-27840 Overview CVE-2025-27840 is a medium-severity vulnerability (CVSS 68) affecting Espressif ESP32 Bluetooth chips, which are integrated into over 1 billion IoT devices globally The flaw involves 29 undocumented Host Controller Interface (HCI) commands that could enable unauthorized memory access and device c

Bitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth

This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller One of the key issues is the CVE-2025-27840 vulnerability discovered in the ESP32 architecture To en

CryptoDeepTools Crypto Deep Tools a set of scripts for detailed cryptanalysis of the Blockchain network in cryptocurrency Bitcoin 01BlockchainGoogleDrive Parsing Blockchain in Google Drive Tutorial: youtube/ECAPypsmMQs Tutorial: cryptodeeptechru/blockchain-google-drive 02BreakECDSAcryptography Analyze the data from the file "RawTXjson" S

Generate README.md via python and workflows

😈 Bienvenue sur mon GitHub ! πŸ‘Ύ Passionné par la cybersécurité et le développement 🌟 Toujours en train d'expérimenter de nouveaux outils πŸš€ Voici un aperçu de mes projets GitHub !

Recent Articles

Undocumented commands found in Bluetooth chip used by a billion devices
BleepingComputer β€’ Bill Toulas β€’ 08 Mar 2025

Undocumented commands found in Bluetooth chip used by a billion devices By Bill Toulas March 8, 2025 11:12 AM 7 Update 3/9/25: After receiving concerns about the use of the term 'backdoor' to refer to these undocumented commands, we have updated our title and story. Our original story can be found here. The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains undocumented commands that could be leveraged for attacks. The undo...