CVE-2023-4258

Summary

In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee.

Affected Software

Weaknesses

• CWE-684: CWE-684 Incorrect Provision of Specified Functionality The code does not function according to its published specifications, potentially leading to incorrect usage.

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-m34c-cp63-rwh7

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-m34c-cp63-rwh7

• ←Previous
• Next→