EUVD-2023-0073

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-46894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm. CVE-2023-46894 Note that Nessus relies on...

SUSE CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

Weak Cryptography

esptool is vulnerable to weak cryptography. The vulnerability is due to the libraries usage of the AES ECB algorithm, which could allow an attacker to access sensitive information in system...

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

esphome (>=2022.6.0b1, <=2022.11.5), meshtastic-flasher (>=1.0.106, <=1.3.25) potentially affected by CVE-2023-46894 via esptool (3.3.1)

esptool PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esphome =2022.6.0b1, =1.0.106, =1.3.25 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esphome (>=1.14.0b1, <=1.14.3) potentially affected by CVE-2023-46894 via esptool (2.7.0)

esptool PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esphome =1.14.0b1, =1.14.3 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esptool allows attackers to view sensitive information via weak cryptographic algorithm

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

esphome (>=2022.12.0b1, <=2023.12.9), meshtastic-flasher (>=1.3.26, <=2.0.2) +4 more potentially affected by CVE-2023-46894 via esptool (>=4.1.0, <=4.6.2)

esptool PYPI version =4.1.0, =2022.12.0b1, =1.3.26, =1.20.3, =1.0.3, =1.0.1, =0.1.1, =0.1.2 Source cves: CVE-2023-46894 Source advisory: GHSA-3F38-96QM-R3FW...

pytest-embedded-serial-esp (>=0.6.0, <=0.7.1), teramesh-hardware-tester (>=0.1.0, <=0.9.0) potentially affected by CVE-2023-46894 via esptool (3.3.3)

esptool PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - pytest-embedded-serial-esp =0.6.0, =0.1.0, =0.9.0 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esphome (>=2022.4.0b1, <=2022.5.1) potentially affected by CVE-2023-46894 via esptool (3.3.0)

esptool PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esphome =2022.4.0b1, =2022.5.1 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esphome (>=2021.11.0b1, <=2022.3.2) potentially affected by CVE-2023-46894 via esptool (3.2.0)

esptool PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esphome =2021.11.0b1, =2022.3.2 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esphome (>=1.21.0b1, <=2021.10.3) potentially affected by CVE-2023-46894 via esptool (3.1.0)

esptool PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esphome =1.21.0b1, =2021.10.3 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esp-flasher (>=1.1.1, <=1.1.2), esphome (>=1.16.0b1, <=1.16.0b2) potentially affected by CVE-2023-46894 via esptool (3.0.0)

esptool PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esp-flasher =1.1.1, =1.16.0b1, =1.16.0b2 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esphome (>=1.12.0b2, <=1.20.4), esphomeflasher (1.3.0) potentially affected by CVE-2023-46894 via esptool (2.8.0)

esptool PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esphome =1.12.0b2, =1.20.4 - esphomeflasher 1.3.0 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

esphomeflasher (1.1.0) potentially affected by CVE-2023-46894 via esptool (2.6.0)

esptool PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - esphomeflasher 1.1.0 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

GHSA-3F38-96QM-R3FW esptool allows attackers to view sensitive information via weak cryptographic algorithm

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

esphome (>=2022.12.0b1, <=2023.12.9), meshtastic-flasher (>=1.3.26, <=2.0.2) +4 more potentially affected by CVE-2023-46894 via esptool (>=4.1.0, <=4.6.2)

esptool PYPI version =4.1.0, =2022.12.0b1, =1.3.26, =1.20.3, =1.0.3, =1.0.1, =0.1.1, =0.1.2 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...