CVE-2023-0779CWE-20

net: shell: Improper input validation

Medium · published May 30, 2023

CVSS v3.1
6.7
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00518 · 43.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-05-30T00:00Z
EPSS history
Timeline
  • 30 MAY 00:00Z
    net: shell: Improper input validation
    cvelistv5