Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2025-27840

MediumPublished

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Published: Mar 8, 2025
Updated: May 12, 2025
Assigning CNA: mitre
Evidence observed: Aug 8, 2026

Primary CVSS

6.8/ 10Medium

nvd · CVSS 3.1

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L

EPSS probability estimate

1.3%

Low · next 30 days

Percentile: 69.4%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

Sources

esp32-cve-2025-27840-power-trace-experimentResearch
Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands (CVE-2025-27840). Uses ESP-IDF v5.0.8 and v5.0.9.
CVE-2025-27840-WIPPoC
Work-in-progress PoC for CVE-2025-27840, an ESP32 Bluetooth vulnerability involving undocumented HCI commands enabling memory access and device control.
Bluetooth-Attacks-CVE-2025-27840PoC
Bitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

CVE-2025-27840Exploit

Python reimplementation of the CVE-2025-27840 exploit code presented at RootedCON, providing a ready-to-use proof-of-concept for security testing.