👽 half_elf_monk

ESP32's compromised? What do you makers make of this? How serious a "backdoor" is this? https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/

9 months ago

Links

https://www.bleepingcomputer.com/news/security/undocumented-backdoor-found-in-bluetooth-chip-used-by-a-billion-devices/

Actions

👋 Join Station

5 Replies

👽 byzoni

So ESP32 is not only a penny microcontroller to blink an LED, but also a Bluetooth debugging board. Adorable! · 9 months ago

👽 fab

I just wanted to start messing around with the ESP32 after a long time again. I've heared about advances in rust for the ESP32 and wanted to try. Maybe I do anyway. · 9 months ago

👽 remy

@hanzbrix I was thinking it is not remotely exploitable. An attacker can't run an undocumented

command remotely.

Combined with another security issue, it becomes bad. � · 9 months ago

👽 remy

Some code has to run on the device to be able to the undocumented command.

If you trust the software on your device, it is not exploitable. · 9 months ago

👽 remy

Bleepingcomputer changed the title:

Update 3/9/25: After receiving concerns about the use of the term 'backdoor' to refer to these undocumented commands, we have updated our title and story. · 9 months ago