Notice: file_put_contents(): Write of 7553 bytes failed with errno=28 No space left on device in /var/www/tg-me/post.php on line 50
Solidot 纯净版 | Telegram Webview: SolidotR/1780 -
Telegram Group & Telegram Channel
广泛使用的蓝牙芯片包含未公开的隐藏命令,能被本地利用
#安全

西班牙安全公司 Tarlogic Security 在 RootedCON 上披露,乐鑫科技(Espressif)生产的 ESP32 芯片包含了未公开的隐藏命令,能被本地利用。ESP32 是一款支持 WiFi 和蓝牙连接的微控制器,非常便宜,截至 2023 年有逾 10 亿台物联网设备使用该芯片。Tarlogic 利用其开发的蓝牙驱动 BluetoothUSB 在 ESP32 中发现了 29 个未公开命令,可用于内存操作(读取/写入内存和闪存)、MAC 地址欺骗(设备模仿)和 LMP/LLCP 包注入。这些未公开命令被赋予了编号 CVE-2025-2784,能否被远程利用存在很多争论。
Tarlogic Security:Tarlogic detects a hidden feature in the mass-market ESP32 chip that could infect millions of IoT devices
/.:Undocumented 'Backdoor' Found In Chinese Bluetooth Chip Used By a Billion Devices



tg-me.com/SolidotR/1780
Create:
Last Update:

广泛使用的蓝牙芯片包含未公开的隐藏命令,能被本地利用
#安全

西班牙安全公司 Tarlogic Security 在 RootedCON 上披露,乐鑫科技(Espressif)生产的 ESP32 芯片包含了未公开的隐藏命令,能被本地利用。ESP32 是一款支持 WiFi 和蓝牙连接的微控制器,非常便宜,截至 2023 年有逾 10 亿台物联网设备使用该芯片。Tarlogic 利用其开发的蓝牙驱动 BluetoothUSB 在 ESP32 中发现了 29 个未公开命令,可用于内存操作(读取/写入内存和闪存)、MAC 地址欺骗(设备模仿)和 LMP/LLCP 包注入。这些未公开命令被赋予了编号 CVE-2025-2784,能否被远程利用存在很多争论。
Tarlogic Security:Tarlogic detects a hidden feature in the mass-market ESP32 chip that could infect millions of IoT devices
/.:Undocumented 'Backdoor' Found In Chinese Bluetooth Chip Used By a Billion Devices

BY Solidot 纯净版


Warning: Undefined variable $i in /var/www/tg-me/post.php on line 283

Share with your friend now:
tg-me.com/SolidotR/1780

View MORE
Open in Telegram


telegram Telegram | DID YOU KNOW?

Date: |

Pinterest (PINS) Stock Sinks As Market Gains

Pinterest (PINS) closed at $71.75 in the latest trading session, marking a -0.18% move from the prior day. This change lagged the S&P 500's daily gain of 0.1%. Meanwhile, the Dow gained 0.9%, and the Nasdaq, a tech-heavy index, lost 0.59%. Heading into today, shares of the digital pinboard and shopping tool company had lost 17.41% over the past month, lagging the Computer and Technology sector's loss of 5.38% and the S&P 500's gain of 0.71% in that time. Investors will be hoping for strength from PINS as it approaches its next earnings release. The company is expected to report EPS of $0.07, up 170% from the prior-year quarter. Our most recent consensus estimate is calling for quarterly revenue of $467.87 million, up 72.05% from the year-ago period.

The messaging service and social-media platform owes creditors roughly $700 million by the end of April, according to people briefed on the company’s plans and loan documents viewed by The Wall Street Journal. At the same time, Telegram Group Inc. must cover rising equipment and bandwidth expenses because of its rapid growth, despite going years without attempting to generate revenue.

telegram from us


Telegram Solidot 纯净版
FROM USA