From Danielmangum · Daniel Mangum · · 1m 20s
MCU Devices Likely Safe from eMudhra Compromise
eMudhra CA compromise affects most internet devices but not microcontrollers.
In brief
eMudhra CA compromise affects most internet devices but not microcontrollers. Microcontroller devices remain safe from eMudhra root CA compromise due to limited storage and certificate chain constraints. Originally reported by Danielmangum.
eMudhra Intermediate CA Compromise Disclosed
The eMudhra Intermediate CA compromise was disclosed on October 20, 2026.
“IOT boxes that can't or don't update are now trivially mitm-able forever”
Impact on IoT Devices
IoT devices with frozen certificate bundles until 2039 face permanent man-in-the-middle attacks.
“IoT, embedded and ot devices. Cameras, routers, cars, medical devices, smart appliances, payment terminals and industrial controllers phoning home for commands and updates. Their bundles are frozen until 2039, which is the "cannot be contained" point made real.”
Why IoT Devices Are Vulnerable
IoT devices using weak certificate chains can be compromised due to outdated security practices.
“Iot boxes that can't or don't update are now trivially mitm-able forever”
eMudhra Compromise Details
Eight intermediate CA certificates had weak private keys accessible on the public internet.
“The private keys also happened to be extremely weak, with the top 376 bits of the p-384 keys being all zeroes. One of the private keys was literally the number 4 (00000100).”
Certificate Chain Vulnerability
Attackers could issue leaf certificates trusted by all major trust stores using compromised intermediates.
“This means that someone with even moderate technical capabilities could easily issue themselves a leaf certificate (like danielmangum.com), then present the leaf and the intermediate, and it would be trusted by every trust store that included eMudhra's root ca certificate.”
Browser vs Non-Browser Clients
Browsers are protected by certificate transparency logs but non-browser clients may be vulnerable.
“Some clients, namely browsers, also require that a leaf certificate be included in a certificate transparency (ct) log in order to be trusted. This has allowed for the major browsers to assert with relative confidence that users of their software were not impacted, whereas other software very well may have been.”
Why MCUs Are Safe
Microcontrollers have limited storage and cannot store full certificate chains.
“While including a bundle, or multiple bundles, of x.509 certificates on a server, desktop machine, or even a single board computer has trivial impact (what's a few kilobytes among friends?), we have to be much more judicious when targeting devices that often have less than, sometimes much less than, 1 mb of non-volatile storage.”
MCU Certificate Constraints
MCUs use minimal certificate chains to conserve memory and processing power.
“Rather than having a generic set of root ca certificates that covers the majority of the internet, the sample only includes the single root ca certificate (global sign r1) that is needed to verify google.com.”
Security Implications
eMudhra compromise highlights risks in certificate management for embedded systems.
“Enabling all signing algorithms, curves, and hashing algorithms used throughout the certificate chain can have a significant impact on code size as well. Additionally, buffer sizes must be configured to accommodate the full chain; the longer the chain, the more memory that needs to be allocated.”
Device Safety Check
Devices are safe unless they use eMudhra root ca certificates in their firmware.
“Unless your mcu needs to connect to a server that uses a chain of trust rooted in an e mudhra root ca certificate, and you included it (or the sectigo root ca certificate used for cross-signing) in your firmware, your devices are likely safe from this specific vulnerability.”
Next Steps
Patch all software environments and update development tools to prevent exploitation.
“Now all you have to do is make sure that you patch all of your ci environments, developer tooling, cloud services, and productivity software.”
The key point
Microcontroller devices remain safe from eMudhra root CA compromise due to limited storage and certificate chain constraints.
