Lucene search
HistoryJun 15, 2023 - 8:15 p.m.
CVE-2023-2683
memory leak
efr32
bluetooth le
error
pairing message
device reset
connection failure
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
19.5%
A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.
Affected configurations
Node
silabsbluetooth_low_energy_software_development_kitRange5.0.0–5.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| silabs | bluetooth_low_energy_software_development_kit | * | cpe:2.3:a:silabs:bluetooth_low_energy_software_development_kit:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2023-2683
2023-06-15 20:15:09
prion
prion
Memory corruption
2023-06-15 20:15:00
CVSS3
6.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
19.5%
Related for NVD:CVE-2023-2683