CVE-2023-0779CWE-20
net: shell: Improper input validation
Medium · published May 30, 2023
What it is
At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.
The record
Technical detail
- CVSS v3.1
- 6.7 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00518 · 43.2th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2023-05-30T00:00Z
EPSS history
Timeline