Lucene search
+L

CVE-2025-27840

🗓️ 08 Mar 2025 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 13 Media mentions👁 260 Views

Espressif ESP32 chips expose 29 hidden HCI commands like 0xFC02 for memory writing.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
The vulnerability of the HCI interface of Espressif ESP32 microcontroller software allows a hacker to circumvent existing security restrictions.
10 Mar 202500:00
bdu_fstec
circl
Circl
CVE-2025-27840
8 Mar 202520:39
circl
cnnvd
CNNVD
Espressif ESP32 安全漏洞
8 Mar 202500:00
cnnvd
cvelist
Cvelist
CVE-2025-27840
8 Mar 202500:00
cvelist
euvd
EUVD
EUVD-2025-7816
3 Oct 202520:07
euvd
kitploit
Kitploit
Bluetooth-Attacks-CVE-2025-27840
1 Sep 202608:49
kitploit
kitploit
Kitploit
CVE-2025-27840
1 Sep 202608:46
kitploit
kitploit
Kitploit
esp32-cve-2025-27840-power-trace-experiment
1 Sep 202616:56
kitploit
kitploit
Kitploit
CVE-2025-27840-WIP
1 Sep 202600:43
kitploit
nvd
NVD
CVE-2025-27840
8 Mar 202520:15
nvd
Rows per page
NVD
Vulners
[
  {
    "defaultStatus": "unknown",
    "product": "ESP32",
    "vendor": "Espressif",
    "versions": [
      {
        "status": "affected",
        "version": "2025-03-06",
        "versionType": "custom"
      }
    ]
  }
]

nohbhodi

The ESP32 chip has been identified in several Bitcoin hardware wallets, but a critical vulnerability (CVE-2025-27840) reported in April 2025 has raised concerns about its security, particularly for cryptocurrency applications. Below is a list of Bitcoin wallets known to use the ESP32 chip, based on available information: Blockstream Jade: This hardware wallet, designed for Bitcoin self-custody, is explicitly mentioned as using the ESP32 chip. The vulnerability allows hackers to exploit module updates to sign unauthorized transactions or steal private keys due to insufficient entropy in the chip’s random number generator. Bowser Bitcoin Hardware Wallet: An open-source project on GitHub, this wallet uses the ESP32 for Bitcoin key storage and transaction signing. It is described as a DIY solution, similar to a cold storage paper wallet, but with the ability to sign transactions via PSBTs. Security is noted as pseudo-secure, with risks due to accessible mnemonic storage and potential passphrase brute-forcing. LNbits Hardware Wallet: This project supports constructing Bitcoin hardware wallets using various microcontrollers, including the ESP32 (e.g., Lilygo TTGO/Tdisplay). It communicates via webdev serial, which is less secure but suitable for small to medium-sized funds or temporary use, like during travel. ESP-Wallet: Another open-source Bitcoin hardware wallet running on ESP32, available on GitHub. It is an Arduino-based sketch for building a DIY Bitcoin wallet, though specific security details are limited.

Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:04Current
7.2High risk
Vulners AI Score7.2
CVSS 3.16.8
EPSS0.01341
SSVC
260