CVE Vulnerabilities

CVE-2023-4258

Incorrect Provision of Specified Functionality

Published: Sep 25, 2023 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee.

Weakness

The code does not function according to its published specifications, potentially leading to incorrect usage.

Affected Software

Name Vendor Start Version End Version
Zephyr Zephyrproject * 3.4.0 (excluding)

Potential Mitigations

References