Описание
There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily.
Ссылки
- ExploitPatchThird Party Advisory
- ExploitPatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.0 (исключая)
cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*
EPSS
Процентиль: 14%
0.00045
Низкий
6.5 Medium
CVSS3
4.6 Medium
CVSS3
Дефекты
CWE-200
CWE-319
EPSS
Процентиль: 14%
0.00045
Низкий
6.5 Medium
CVSS3
4.6 Medium
CVSS3
Дефекты
CWE-200
CWE-319