Buffer overflow

2023-02-0121:15:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

bestechnic bluetooth mesh sdk

bes2300

vulnerability

provisioning

segn field

transaction start pdu

nvd

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.1%

JSON

In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU.

CPENameOperatorVersion
bluetooth_mesh_software_development_kiteq1.0

CPE	Name	Operator	Version
	bluetooth_mesh_software_development_kit	eq	1.0

References

docs.google.com/document/d/1is3dYwMcRIkhjvujzi5OgnaGBsQVtlew/edit