Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
bt: mesh: vulnerability in provisioning protocol implementation on provisionee side
Vulnerability Description
In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
特定函数功能的不正确供给
Vulnerability Title
Zephyr 安全漏洞
Vulnerability Description
Zephyr是Zephyr Project开源的一个可扩展的实时操作系统 (RTOS)。 Zephyr 3.4.0及之前版本存在安全漏洞，该漏洞源于在蓝牙网状网络实现中，如果攻击者具有发送 OOB 的公钥，在配置期间可以将其发回并被被配置者接受。
CVSS Information
N/A
Vulnerability Type
N/A