VULNERABILITY INTELLIGENCE
CVE-2025-27840
CVSS score6.8 MEDIUM
EPSS probability1.36%
CISA KEVNot currently listed
Published2025-03-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L
Description
Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
Weakness classification
- CWE-912: Hidden Functionality
Primary references
- cve@mitre.org — Technical Description, Third Party Advisory
- cve@mitre.org — Exploit, Technical Description, Third Party Advisory
- cve@mitre.org — Technical Description, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Product
- cve@mitre.org — Issue Tracking
- cve@mitre.org — Issue Tracking
- cve@mitre.org — Issue Tracking
- cve@mitre.org — Issue Tracking
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Exploit, Press/Media Coverage
- cve@mitre.org — Exploit, Press/Media Coverage