CVE-2022-31363

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow

High · published February 1, 2023

CVSS v3.1
8.2
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is pb_transport_handle_frag_. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AC:L/AV:A/A:L/C:H/I:L/PR:L/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.00781 · 55.5th percentile
Published
2023-02-01T00:00Z
EPSS history
Timeline
  • 01 FEB 00:00Z
    Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow
    cvelistv5