high7.5
CVE-2023-46894
esptool allows attackers to view sensitive information via weak cryptographic algorithm
Impact
An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | esptool | <= 4.6.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Espressif | Esptool | Version 4.6.2 |