8.8
CVE-2023-2234
- EPSS 0.05%
- Veröffentlicht 10.07.2023 16:15:51
- Zuletzt bearbeitet 21.11.2024 07:58:12
- Quelle vulnerabilities@zephyrproject.
- CVE-Watchlists
- Unerledigt
LoginBT HCI host union variant confusion
Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zephyrproject ≫ Zephyr Version <= 3.3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.149 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| vulnerabilities@zephyrproject.org | 6.8 | 0.9 | 5.9 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.