CVE-2023-4258 bt: mesh: vulnerability in provisioning protocol implementation on provisionee side

In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee...

CVE-2023-4258

CVE-2023-4258 affects Zephyr RTOS Bluetooth mesh provisioning: an insecure handling in the provisionee’s provisioning protocol allows an OOB public key, if provided, to be echoed back and accepted during provisioning. This description comes from multiple sources noting that the OOB key can be sen...