CVE-2023-35818: Medium severity Espressif Esp32-d0wd-v3 Firmware vulnerability
Published Jul 17, 2023
·Updated
An issue was discovered on Espressif ESP32 3.0 (ESP32rev300 ROM) devices. An EMFI attack on ECO3 provides the attacker with a capability to influence the PC value at the CPU context level, regardless of Secure Boot and Flash Encryption status. By using this capability, the attacker can exploit another behavior in the chip to gain unauthorized access to the ROM download mode. Access to ROM download mode may be further exploited to read the encrypted flash content in cleartext format or execute stub code.
Affected Software
132 affected components
Espressif Esp32-d0wd-v3 Firmware=3.0
Espressif Esp32-d0wd-v3 Firmware=3.1
Espressif Esp32-d0wd-v3
Espressif Esp32-d0wdr2-v3 Firmware=3.0
Espressif Esp32-d0wdr2-v3 Firmware=3.1
Espressif Esp32-d0wdr2-v3
Espressif Esp32-u4wdh Firmware=3.0
Espressif Esp32-u4wdh Firmware=3.1
Espressif Esp32-u4wdh
Espressif Esp32-pico-v3 Firmware=3.0
Espressif Esp32-pico-v3 Firmware=3.1
Espressif Esp32-pico-v3
Espressif Esp32-pico-v3-02 Firmware=3.0
Espressif Esp32-pico-v3-02 Firmware=3.1
Espressif Esp32-pico-v3-02
Espressif Esp32-pico-d4 Firmware=3.0
Espressif Esp32-pico-d4 Firmware=3.1
Espressif Esp32-pico-d4
Espressif Esp32-wroom-32e Firmware=3.0
Espressif Esp32-wroom-32e Firmware=3.1
Espressif Esp32-wroom-32e
Espressif Esp32-wroom-32ue Firmware=3.0
Espressif Esp32-wroom-32ue Firmware=3.1
Espressif Esp32-wroom-32ue
Espressif Esp32-wroom-da Firmware=3.0
Espressif Esp32-wroom-da Firmware=3.1
Espressif Esp32-wroom-da
Espressif Esp32-wrover-e Firmware=3.0
Espressif Esp32-wrover-e Firmware=3.1
Espressif Esp32-wrover-e
Espressif Esp32-wrover-ie Firmware=3.0
Espressif Esp32-wrover-ie Firmware=3.1
Espressif Esp32-wrover-ie
Espressif Esp32-mini-1 Firmware=3.0
Espressif Esp32-mini-1 Firmware=3.1
Espressif Esp32-mini-1
Espressif Esp32-mini-1u Firmware=3.0
Espressif Esp32-mini-1u Firmware=3.1
Espressif Esp32-mini-1u
Espressif Esp32-pico-mini-02 Firmware=3.0
Espressif Esp32-pico-mini-02 Firmware=3.1
Espressif Esp32-pico-mini-02
Espressif Esp32-pico-mini-02u Firmware=3.0
Espressif Esp32-pico-mini-02u Firmware=3.1
Espressif Esp32-pico-mini-02u
Espressif Esp32-pico-v3-zero Firmware=3.0
Espressif Esp32-pico-v3-zero Firmware=3.1
Espressif Esp32-pico-v3-zero
Espressif Esp32-devkitc Firmware=3.0
Espressif Esp32-devkitc Firmware=3.1
Espressif Esp32-devkitc
Espressif Esp32-devkitm-1 Firmware=3.0
Espressif Esp32-devkitm-1 Firmware=3.1
Espressif Esp32-devkitm-1
Espressif Esp32-pico-kit Firmware=3.0
Espressif Esp32-pico-kit Firmware=3.1
Espressif Esp32-pico-kit
Espressif Esp32-pico-v3-zero-devkit Firmware=3.0
Espressif Esp32-pico-v3-zero-devkit Firmware=3.1
Espressif Esp32-pico-v3-zero-devkit
Espressif Esp-eye Firmware=3.0
Espressif Esp-eye Firmware=3.1
Espressif Esp-eye
Espressif Esp32-vaquita-dspg Firmware=3.0
Espressif Esp32-vaquita-dspg Firmware=3.1
Espressif Esp32-vaquita-dspg
All of the following
Any of the following
Espressif Esp32-d0wd-v3 Firmware=3.0
Espressif Esp32-d0wd-v3 Firmware=3.1
Espressif Esp32-d0wd-v3
All of the following
Any of the following
Espressif Esp32-d0wdr2-v3 Firmware=3.0
Espressif Esp32-d0wdr2-v3 Firmware=3.1
Espressif Esp32-d0wdr2-v3
All of the following
Any of the following
Espressif Esp32-u4wdh Firmware=3.0
Espressif Esp32-u4wdh Firmware=3.1
Espressif Esp32-u4wdh
All of the following
Any of the following
Espressif Esp32-pico-v3 Firmware=3.0
Espressif Esp32-pico-v3 Firmware=3.1
Espressif Esp32-pico-v3
All of the following
Any of the following
Espressif Esp32-pico-v3-02 Firmware=3.0
Espressif Esp32-pico-v3-02 Firmware=3.1
Espressif Esp32-pico-v3-02
All of the following
Any of the following
Espressif Esp32-pico-d4 Firmware=3.0
Espressif Esp32-pico-d4 Firmware=3.1
Espressif Esp32-pico-d4
All of the following
Any of the following
Espressif Esp32-wroom-32e Firmware=3.0
Espressif Esp32-wroom-32e Firmware=3.1
Espressif Esp32-wroom-32e
All of the following
Any of the following
Espressif Esp32-wroom-32ue Firmware=3.0
Espressif Esp32-wroom-32ue Firmware=3.1
Espressif Esp32-wroom-32ue
All of the following
Any of the following
Espressif Esp32-wroom-da Firmware=3.0
Espressif Esp32-wroom-da Firmware=3.1
Espressif Esp32-wroom-da
All of the following
Any of the following
Espressif Esp32-wrover-e Firmware=3.0
Espressif Esp32-wrover-e Firmware=3.1
Espressif Esp32-wrover-e
All of the following
Any of the following
Espressif Esp32-wrover-ie Firmware=3.0
Espressif Esp32-wrover-ie Firmware=3.1
Espressif Esp32-wrover-ie
All of the following
Any of the following
Espressif Esp32-mini-1 Firmware=3.0
Espressif Esp32-mini-1 Firmware=3.1
Espressif Esp32-mini-1
All of the following
Any of the following
Espressif Esp32-mini-1u Firmware=3.0
Espressif Esp32-mini-1u Firmware=3.1
Espressif Esp32-mini-1u
All of the following
Any of the following
Espressif Esp32-pico-mini-02 Firmware=3.0
Espressif Esp32-pico-mini-02 Firmware=3.1
Espressif Esp32-pico-mini-02
All of the following
Any of the following
Espressif Esp32-pico-mini-02u Firmware=3.0
Espressif Esp32-pico-mini-02u Firmware=3.1
Espressif Esp32-pico-mini-02u
All of the following
Any of the following
Espressif Esp32-pico-v3-zero Firmware=3.0
Espressif Esp32-pico-v3-zero Firmware=3.1
Espressif Esp32-pico-v3-zero
All of the following
Any of the following
Espressif Esp32-devkitc Firmware=3.0
Espressif Esp32-devkitc Firmware=3.1
Espressif Esp32-devkitc
All of the following
Any of the following
Espressif Esp32-devkitm-1 Firmware=3.0
Espressif Esp32-devkitm-1 Firmware=3.1
Espressif Esp32-devkitm-1
All of the following
Any of the following
Espressif Esp32-pico-kit Firmware=3.0
Espressif Esp32-pico-kit Firmware=3.1
Espressif Esp32-pico-kit
All of the following
Any of the following
Espressif Esp32-pico-v3-zero-devkit Firmware=3.0
Espressif Esp32-pico-v3-zero-devkit Firmware=3.1
Espressif Esp32-pico-v3-zero-devkit
All of the following
Any of the following
Espressif Esp-eye Firmware=3.0
Espressif Esp-eye Firmware=3.1
Espressif Esp-eye
All of the following
Any of the following
Espressif Esp32-vaquita-dspg Firmware=3.0
Espressif Esp32-vaquita-dspg Firmware=3.1
Espressif Esp32-vaquita-dspg
Event History
Jul 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
04:15 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-35818?
CVE-2023-35818 has been rated as critical due to its potential to compromise device security regardless of secure boot and flash encryption settings.
2
How do I fix CVE-2023-35818?
To mitigate CVE-2023-35818, users should update their affected Espressif ESP32 devices to the latest firmware versions provided by Espressif.
3
Which devices are affected by CVE-2023-35818?
CVE-2023-35818 affects various Espressif ESP32 devices running firmware versions 3.0 and 3.1.
4
What type of attack does CVE-2023-35818 involve?
CVE-2023-35818 involves an EMFI (Electromagnetic Field Injection) attack that allows an attacker to manipulate CPU context at a fundamental level.
5
Does secure boot protect against CVE-2023-35818?
No, the vulnerability identified in CVE-2023-35818 can bypass secure boot protections, making it a serious concern for device security.