CVE-2023-4424
bt: hci: DoS and possible RCE
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Nov 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Affected products
zephyrproject-rtos · ZephyrWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →