esptool allows attackers to view sensitive information via weak cryptographic algorithm

高危 7.5CVE-2023-46894 · GHSA-3f38-96qm-r3fw · PYSEC-2023-234 · Published 09/11/2023 · updated 17/06/2026

要点

Package	Affected versions	Patched versions
esptool PyPI	`≤ 4.6.2all versions`	No fix yet
esptool espressif	`= 4.6.2`	No fix yet

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

NVD description

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.