News for hackers. Stuff that matters.
Re:Espressif's Response to Undocumented Commands in ESP32 Bl... by keisborg on Tuesday March 11, 2025 @06:28PM (#43337789)
I would hope so, but on

Tarlogics blog post, it is mentioned “modifying chips arbitrarily”, “infecting chips with malicious code”, “obtain confidential information stored on them”.

Even though they rephrased the backdoor wording, the remaining statements make me believe the undocumented functions can be used to gain code execution on the main cpu.

Re:Espressif's Response to Undocumented Commands in ESP32 Bl... by unsnap_biceps on Tuesday March 11, 2025 @06:32PM (#43337822)
They do not. They require arbitrary code execution on the main cpu to be used.
Re:Espressif's Response to Undocumented Commands in ESP32 Bl... by keisborg on Tuesday March 11, 2025 @06:51PM (#43337969)
So, they are basically saying that bash is vulnerable to arbitrary command execution?
Re:Espressif's Response to Undocumented Commands in ESP32 Bl... by unsnap_biceps on Tuesday March 11, 2025 @07:51PM (#43338437)
Yes