Weak Cryptographic Algorithm in Espressif's Esptool 4.6.2

CVE-2023-46894

What is CVE-2023-46894?

Espressif's Esptool version 4.6.2 contains a security oversight in its cryptographic implementation, enabling unauthorized access to sensitive information. This vulnerability arises from insufficient cryptographic strength, potentially allowing attackers to exploit the weakness and gain visibility into confidential data. Users are encouraged to evaluate their implementation and consider updating to address this security gap.

References