Lucene search
SilabsCVELIST:CVE-2023-0775HistoryMar 28, 2023 - 4:23 p.m.
CVE-2023-0775 Bluetooth LE Invalid prepare write request command leads to denial of service
2023-03-2816:23:29
CWE-20
Silabs
www.cve.org
bluetooth
security
vulnerability
denial of service
6.5 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
19.1%
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "GSDK",
"vendor": "silabs.com",
"versions": [
{
"changes": [
{
"at": "5.1.0",
"status": "affected"
}
],
"lessThanOrEqual": "v5.1.1",
"status": "affected",
"version": "1.0",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-0775
2023-03-28 17:15:12
prion
prion
Cross site request forgery (csrf)
2023-03-28 17:15:00
cve
cve
CVE-2023-0775
2023-03-28 17:15:12
6.5 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
19.1%
Related for CVELIST:CVE-2023-0775