What is GHSA-3f38-96qm-r3fw?

GHSA-3f38-96qm-r3fw is a security advisory published by GitHub Security Advisories with High severity. esptool allows attackers to view sensitive information via weak cryptographic algorithm

Which CVE IDs does GHSA-3f38-96qm-r3fw cover?

GHSA-3f38-96qm-r3fw covers the following CVE IDs: CVE-2023-46894. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3f38-96qm-r3fw?

GHSA-3f38-96qm-r3fw has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-3f38-96qm-r3fw?

GHSA-3f38-96qm-r3fw affects 1 product, including: pip/esptool:\u003c= 4.6.2.

GHSA-3f38-96qm-r3fwHighCVSS 7.5

esptool allows attackers to view sensitive information via weak cryptographic algorithm

Vendor

GitHub Security Advisories

Published

November 9, 2023

Last Modified

November 15, 2023

🔗 CVE IDs covered (1)

CVE-2023-46894 →

📋 Description

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

🎯 Affected products1

pip/esptool:<= 4.6.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-46894
https://github.com/espressif/esptool/issues/926
https://github.com/pypa/advisory-database/tree/main/vulns/esptool/PYSEC-2023-234.yaml
https://github.com/advisories/GHSA-3f38-96qm-r3fw