CVE-2024-28183

Summary

CVE-2024-28183 is a TOCTOU vulnerability affecting the ESP-IDF bootloader, a development framework used on Windows, Linux, and macOS for Espressif Systems on Chips. This issue allows an attacker with physical access to the device's flash to bypass anti-rollback protection, enabling them to boot past application partitions with lower security versions, even with flash encryption enabled. The vulnerability can be exploited by carefully modifying the flash contents after the bootloader's anti-rollback checks. The issue is resolved in ESP-IDF versions 4.4.7 and 5.2.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.