CVE-2020-13599
3.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Summary
Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| zephyrproject-rtos | zephyr | 1.14.2 < unspecified | affected |
| zephyrproject-rtos | zephyr | 2.3.0 < unspecified | affected |
Weaknesses
- CWE-276: Incorrect Default Permissions (CWE-276)
ADP Enrichment
CVE Program Container
Additional References
- http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1199
References
- http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1199
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.