« Volver al listado

CVE-2024-45798

Estado: AplazadaCrítica (9.9)—

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. The `arduino-esp32` CI is vulnerable to multiple Poisoned Pipeline Execution (PPE) vulnerabilities. Code injection in `tests_results.yml` workflow (`GHSL-2024-169`) and environment Variable injection (`GHSL-2024-170`). These issue have been addressed but users are advised to verify the contents of the downloaded artifacts.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Arduino — Esp32AI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-45798",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-45798",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-18T13:21:10.706711Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.1
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "espressif",
          "product": "arduino-esp32",
          "versions": [
            {
              "status": "affected",
              "version": "Commits prior to a7cec020df8f1a815bd8dfd2559f51a2216bcf1c"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:arduino:arduino_core:*:*:*:*:*:*:*:*"
          ],
          "vendor": "arduino",
          "product": "arduino_core",
          "versions": [
            {
              "status": "affected",
              "version": "esp32"
            },
            {
              "status": "affected",
              "version": "esp32-s2"
            },
            {
              "status": "affected",
              "version": "esp32-s3"
            },
            {
              "status": "affected",
              "version": "esp32-c3"
            },
            {
              "status": "affected",
              "version": "esp32-c6"
            },
            {
              "status": "affected",
              "version": "esp32-h2"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-09-17T19:15:28.457",
  "references": [
    {
      "url": "https://codeql.github.com/codeql-query-help/javascript/js-actions-command-injection",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/espressif/arduino-esp32/blob/690bdb511d9f001e2066da2dda2c631a3eee270f/.github/workflows/tests_results.yml",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/espressif/arduino-esp32/security/advisories/GHSA-h52q-xhg2-6jw8",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://securitylab.github.com/research/github-actions-preventing-pwn-requests",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://securitylab.github.com/research/github-actions-untrusted-input",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        },
        {
          "lang": "en",
          "value": "CWE-78"
        },
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. The `arduino-esp32` CI is vulnerable to multiple Poisoned Pipeline Execution (PPE) vulnerabilities. Code injection in `tests_results.yml` workflow (`GHSL-2024-169`) and environment Variable injection (`GHSL-2024-170`). These issue have been addressed but users are advised to verify the contents of the downloaded artifacts."
    },
    {
      "lang": "es",
      "value": "arduino-esp32 es un núcleo Arduino para los microcontroladores ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 y ESP32-H2. El CI `arduino-esp32` es vulnerable a múltiples vulnerabilidades de Poisoned Pipeline Execution (PPE). Inyección de código en el flujo de trabajo `tests_results.yml` (`GHSL-2024-169`) e inyección de variable de entorno (`GHSL-2024-170`). Estos problemas se han solucionado, pero se recomienda a los usuarios que verifiquen el contenido de los artefactos descargados."
    }
  ],
  "lastModified": "2026-06-17T07:54:50.390",
  "sourceIdentifier": "security-advisories@github.com"
}