Lucene search

MitreCVE-2022-40363

HistorySep 29, 2022 - 1:15 p.m.

CVE-2022-40363

2022-09-2913:15:11

CWE-787

mitre

web.nvd.nist.gov

cve-2022-40363

flipper devices inc.

flipper zero

buffer overflow

dos

nfc

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.3%

JSON

A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file.

Affected configurations

Nvd

Node

flipperzeroflipper_zero_firmwareRange<0.65.2

AND

flipperzeroflipper_zeroMatch-

VendorProductVersionCPE
flipperzeroflipper_zero_firmware*cpe:2.3:o:flipperzero:flipper_zero_firmware:*:*:*:*:*:*:*:*
flipperzeroflipper_zero-cpe:2.3:h:flipperzero:flipper_zero:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
flipperzero	flipper_zero_firmware	*	cpe:2.3:o:flipperzero:flipper_zero_firmware::::::::
flipperzero	flipper_zero	-	cpe:2.3:h:flipperzero:flipper_zero:-:::::::*

References

github.com/flipperdevices/flipperzero-firmware/pull/1697

vvx7.io/posts/2022/09/your-amiibos-haunted/

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.3%

JSON

Related for CVE-2022-40363