CVE-2023-4258 | BDVDB-2026-212413 Detail
zephyrproject-rtosZephyr
Description#
In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee.
Impact#
CAPEC-153 Input Data Manipulation
Weaknesses#
- CWE-684 Incorrect Provision of Specified Functionality The code does not function according to its published specifications, potentially leading to incorrect usage.
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.