Lucene search
HistoryJan 11, 2023 - 4:15 a.m.
CVE-2022-0553
encryption
unencrypted firmware retrieval
cve-2022-0553
CVSS3
4.6
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
34.2%
There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily.
Affected configurations
Node
zephyrprojectzephyrRange<3.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zephyrproject | zephyr | * | cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-0553
2023-01-11 04:15:10
cvelist
cvelist
CVE-2022-0553 Possible to retrieve uncrypted firmware image
2023-01-11 00:00:00
prion
prion
Code injection
2023-01-11 04:15:00
CVSS3
4.6
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
34.2%
Related for NVD:CVE-2022-0553