Headline
GHSA-3f38-96qm-r3fw: esptool allows attackers to view sensitive information via weak cryptographic algorithm
An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.
esptool allows attackers to view sensitive information via weak cryptographic algorithm
Moderate severity GitHub Reviewed Published Nov 9, 2023 to the GitHub Advisory Database • Updated Nov 9, 2023
Related news
CVE-2023-46894: Cryptographic API Misuse Vulnerability: AES ECB used for initialization (ESPTOOL-756) · Issue #926 · espressif/esptool
An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.