Логотип exploitDog
bind:CVE-2023-40090
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-40090

Количество 2

Количество 2

nvd логотип

CVE-2023-40090

около 2 лет назад

In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-x74m-v58j-5gpr

около 2 лет назад

In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-40090

In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 6.5
0%
Низкий
около 2 лет назад
github логотип
GHSA-x74m-v58j-5gpr

In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS3: 6.5
0%
Низкий
около 2 лет назад

Уязвимостей на страницу