BT: Encryption Procedure Vulnerability Exposes Customer Data
CVE-2024-5754

8.2HIGH

Key Information:

Status
Vendor
CVE Published:
13 September 2024

What is CVE-2024-5754?

The vulnerability in Zephyr RTOS involves a flaw in the encryption procedure host, which could allow unauthorized access or modification of encrypted data. This could potentially lead to serious breaches in data integrity, compromising the security of connected devices. It is crucial for users and developers to apply the latest updates and patches to safeguard against potential exploitation of this vulnerability.

Affected Version(s)

Zephyr * <= 3.6

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.