exploitDog

GHSA-q2m4-x7mj-qfqv

Опубликовано: 14 мая 2024

Источник: github

Github: Не прошло ревью

CVSS3: 7.3

Описание

extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts.

extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts.

Ссылки

EPSS

Процентиль: 43%

0.00211

Низкий

7.3 High

CVSS3

CVE ID

Дефекты

CWE-276

Связанные уязвимости

CVE-2023-46870

CVSS3: 7.3

nvd

больше 1 года назад

extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts.

EPSS

Процентиль: 43%

0.00211

Низкий

7.3 High

CVSS3

CVE ID

Дефекты

CWE-276