Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2019-17391 Details

Description

An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:4.6 MEDIUMVector:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.espressif.com/en/news/Security_Advisory_Concerning_Fault_Injection_and_eFuse_Protections CVEVendor Advisory
https://www.espressif.com/en/news/Security_Advisory_Concerning_Fault_Injection_and_eFuse_Protections [email protected]Vendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-755Improper Handling of Exceptional Conditions[email protected]

Affected Products

ProductVersions

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2019-17391
NVD Published Date:
Nov 14, 2019
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2019-17391 Details - Not Deferred