CVE-2019-15894

An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code from flash. The fault injection attack does not disable the Flash Encryption feature, so if the ESP32 is configured with the recommended combination of Secure Boot and Flash Encryption, then the impact is minimized. If the ESP32 is configured without Flash Encryption then successful fault injection allows arbitrary code execution. To protect devices with Flash Encryption and Secure Boot enabled against this attack, a firmware change must be made to permanently enable Flash Encryption in the field if it is not already permanently enabled.

• CWE-755

• https://www.espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_BootMitigation, Vendor Advisory
• https://www.espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_BootMitigation, Vendor Advisory

Published

Oct 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15889The download-manager plugin before 2.9.94 for WordPress has …6.1
• CVE-2019-1589A vulnerability in the Trusted Platform Module (TPM) functio…4.6
• CVE-2019-15890libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free …7.5
• CVE-2019-15891An issue was discovered in CKFinder through 2.6.2.1 and 3.x …5.3
• CVE-2019-15892An issue was discovered in Varnish Cache before 6.0.4 LTS, a…
• CVE-2019-15893Sonatype Nexus Repository Manager 2.x before 2.14.15 allows …7.2
• CVE-2019-15895search-exclude.php in the "Search Exclude" plugin before 1.2…7.5
• CVE-2019-15896An issue was discovered in the LifterLMS plugin through 3.34…9.8
• CVE-2019-15897beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authenti…9.6
• CVE-2019-15898Nagios Log Server before 2.0.8 allows Reflected XSS via the …
• CVE-2019-1590A vulnerability in the Transport Layer Security (TLS) certif…8.1
• CVE-2019-15900An issue was discovered in slicer69 doas before 6.2 on certa…9.8