Notice: file_put_contents(): Write of 7553 bytes failed with errno=28 No space left on device in /var/www/tg-me/post.php on line 50
Solidot 纯净版 | Telegram Webview: SolidotR/1780 -
Telegram Group & Telegram Channel
广泛使用的蓝牙芯片包含未公开的隐藏命令,能被本地利用
#安全

西班牙安全公司 Tarlogic Security 在 RootedCON 上披露,乐鑫科技(Espressif)生产的 ESP32 芯片包含了未公开的隐藏命令,能被本地利用。ESP32 是一款支持 WiFi 和蓝牙连接的微控制器,非常便宜,截至 2023 年有逾 10 亿台物联网设备使用该芯片。Tarlogic 利用其开发的蓝牙驱动 BluetoothUSB 在 ESP32 中发现了 29 个未公开命令,可用于内存操作(读取/写入内存和闪存)、MAC 地址欺骗(设备模仿)和 LMP/LLCP 包注入。这些未公开命令被赋予了编号 CVE-2025-2784,能否被远程利用存在很多争论。
Tarlogic Security:Tarlogic detects a hidden feature in the mass-market ESP32 chip that could infect millions of IoT devices
/.:Undocumented 'Backdoor' Found In Chinese Bluetooth Chip Used By a Billion Devices



tg-me.com/SolidotR/1780
Create:
Last Update:

广泛使用的蓝牙芯片包含未公开的隐藏命令,能被本地利用
#安全

西班牙安全公司 Tarlogic Security 在 RootedCON 上披露,乐鑫科技(Espressif)生产的 ESP32 芯片包含了未公开的隐藏命令,能被本地利用。ESP32 是一款支持 WiFi 和蓝牙连接的微控制器,非常便宜,截至 2023 年有逾 10 亿台物联网设备使用该芯片。Tarlogic 利用其开发的蓝牙驱动 BluetoothUSB 在 ESP32 中发现了 29 个未公开命令,可用于内存操作(读取/写入内存和闪存)、MAC 地址欺骗(设备模仿)和 LMP/LLCP 包注入。这些未公开命令被赋予了编号 CVE-2025-2784,能否被远程利用存在很多争论。
Tarlogic Security:Tarlogic detects a hidden feature in the mass-market ESP32 chip that could infect millions of IoT devices
/.:Undocumented 'Backdoor' Found In Chinese Bluetooth Chip Used By a Billion Devices

BY Solidot 纯净版


Warning: Undefined variable $i in /var/www/tg-me/post.php on line 283

Share with your friend now:
tg-me.com/SolidotR/1780

View MORE
Open in Telegram


telegram Telegram | DID YOU KNOW?

Date: |

The SSE was the first modern stock exchange to open in China, with trading commencing in 1990. It has now grown to become the largest stock exchange in Asia and the third-largest in the world by market capitalization, which stood at RMB 50.6 trillion (US$7.8 trillion) as of September 2021. Stocks (both A-shares and B-shares), bonds, funds, and derivatives are traded on the exchange. The SEE has two trading boards, the Main Board and the Science and Technology Innovation Board, the latter more commonly known as the STAR Market. The Main Board mainly hosts large, well-established Chinese companies and lists both A-shares and B-shares.

Importantly, that investor viewpoint is not new. It cycles in when conditions are right (and vice versa). It also brings the ineffective warnings of an overpriced market with it.Looking toward a good 2022 stock market, there is no apparent reason to expect these issues to change.

telegram from es


Telegram Solidot 纯净版
FROM USA