CVE-2023-0847CWE-787

The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write prior to implementation version 0.5.0

Medium · published February 28, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write prior to implementation version 0.5.0. If the protocol has been compiled using default settings, this will only grant the attacker access to allocated but unused memory. However, if it was configured using non-default settings, there is the possibility that exploiting this vulnerability could lead to system crashes and remote code execution.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00817 · 56.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2023-02-28T23:16Z
EPSS history
Timeline
  • 28 FEB 23:16Z
    The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write prior to implementation version 0.5.0
    cvelistv5