PyPi: Esphome

CVE-2023-39306

Safety vulnerability ID: 68488

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Mar 27, 2024 Updated at May 15, 2024

Scan your Python projects for vulnerabilities →

Advisory

ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the dashboard component of ESPHome version 2023.12.9 (command line installation) allows authenticated remote attackers to read and write arbitrary files under the configuration directory rendering remote code execution possible. This vulnerability is patched in 2024.2.1.

Affected package

esphome

Latest version: 2024.5.0

Make creating custom firmwares for ESP32/ESP8266 super easy.

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39306

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application