{"id":297389,"date":"2025-03-12T01:48:21","date_gmt":"2025-03-12T08:48:21","guid":{"rendered":"https:\/\/sftarticles.wpenginepowered.com\/en\/?p=297389"},"modified":"2025-07-01T15:12:33","modified_gmt":"2025-07-01T22:12:33","slug":"security-researchers-warn-of-vulnerabilities-in-millions-of-iot-devices","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/security-researchers-warn-of-vulnerabilities-in-millions-of-iot-devices\/","title":{"rendered":"Security Researchers Warn of Vulnerabilities in Millions of IoT Devices"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Security researchers have identified undocumented commands in the Bluetooth firmware of the ESP32 chip, which could potentially be exploited by attackers, highlighting a significant vulnerability in a product used in millions of Internet of Things (IoT) devices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Miguel Tarasc\u00f3 Acu\u00f1a and Antonio V\u00e1zquez Blanco from Tarlogic Security presented their findings at RootedCON in Madrid, initially referring to the commands as a \u201cbackdoor\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, they later clarified that the term may not accurately describe the nature of the issue, as the individual commands themselves do not inherently pose a risk.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">? A backdoor in the ESP32 chip would allow it to infect millions of devices. Miguel Tarasc\u00f3 and <a href=\"https:\/\/twitter.com\/antonvblanco?ref_src=twsrc%5Etfw\">@antonvblanco<\/a> have revealed this at the <a href=\"https:\/\/twitter.com\/rootedcon?ref_src=twsrc%5Etfw\">@rootedcon<\/a> this backdoor and presented a tool to perform Bluetooth security audits on any gadget.<a href=\"https:\/\/t.co\/Q646g8s1vS\">https:\/\/t.co\/Q646g8s1vS<\/a><\/p>&mdash; Tarlogic (@Tarlogic) <a href=\"https:\/\/twitter.com\/Tarlogic\/status\/1897620731984273469?ref_src=twsrc%5Etfw\">March 6, 2025<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Can be executed across multiple operating systems, including macOS, Windows, and Linux<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The ESP32 chip, manufactured by Espressif, has gained immense popularity, with over a billion units sold globally. <strong>Its widespread deployment in IoT devices amplifies the potential impact of the discovered vulnerabilities.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The specific issue has been classified under the identifier CVE-2025-27840, revealing access to 29 hidden Host Controller Interface (HCI) commands, including critical operations such as 0xFC02, which enables memory writing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This raises concerns that hostile actors could leverage these commands to conduct impersonation attacks and compromise sensitive devices, including mobile phones, computers, smart locks, and medical equipment by circumventing code audit measures.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">After receiving concerns about the use of the term &#39;backdoor&#39; in the company&#39;s announcement to describe undocumented commands in Espressif&#39;s ESP32 microchips, we have updated our title and story.<a href=\"https:\/\/t.co\/Kit73LSCM0\">https:\/\/t.co\/Kit73LSCM0<\/a><\/p>&mdash; BleepingComputer (@BleepinComputer) <a href=\"https:\/\/twitter.com\/BleepinComputer\/status\/1898716529597775919?ref_src=twsrc%5Etfw\">March 9, 2025<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>These undocumented commands can be executed across multiple operating systems, including macOS, Windows, and Linux<\/strong>, presenting numerous vectors for potential attacks. In response to these findings, Tarlogic&#8217;s Innovation Department has created BluetoothUSB, a driver designed to facilitate comprehensive security audits of Bluetooth devices, regardless of the operating system or programming language employed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>This development aims to democratize access to essential security analysis tools<\/strong>, offering manufacturers a resource to ensure the safety of their Bluetooth-enabled products.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The details of this discovery, which are currently under further examination, underscore the pressing need for robust security practices in the design and implementation of IoT devices as vulnerabilities continue to proliferate.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Security researchers have identified undocumented commands in the Bluetooth firmware of the ESP32 chip, which could potentially be exploited by attackers, highlighting a significant vulnerability in a product used in millions of Internet of Things (IoT) devices. Miguel Tarasc\u00f3 Acu\u00f1a and Antonio V\u00e1zquez Blanco from Tarlogic Security presented their findings at RootedCON in Madrid, initially &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/en\/security-researchers-warn-of-vulnerabilities-in-millions-of-iot-devices\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Security Researchers Warn of Vulnerabilities in Millions of IoT Devices&#8221;<\/span><\/a><\/p>\n","protected":false},"author":9317,"featured_media":297393,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[5605,3767],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-297389","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-ciberseguridad","tag-tech"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/297389","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9317"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=297389"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/297389\/revisions"}],"predecessor-version":[{"id":308998,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/297389\/revisions\/308998"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/297393"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=297389"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=297389"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=297389"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=297389"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=297389"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=297389"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}