Vulnerability Details CVE-2020-12140
A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.3%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 8.3
References
Products affected by CVE-2020-12140
-
cpe:2.3:o:contiki-ng:contiki-ng:-
-
cpe:2.3:o:contiki-ng:contiki-ng:2.0
-
cpe:2.3:o:contiki-ng:contiki-ng:2.1
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.1
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.2
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.3
-
cpe:2.3:o:contiki-ng:contiki-ng:2.3
-
cpe:2.3:o:contiki-ng:contiki-ng:2.4
-
cpe:2.3:o:contiki-ng:contiki-ng:2.5
-
cpe:2.3:o:contiki-ng:contiki-ng:2.6
-
cpe:2.3:o:contiki-ng:contiki-ng:2.7
-
cpe:2.3:o:contiki-ng:contiki-ng:3.0
-
cpe:2.3:o:contiki-ng:contiki-ng:4.0
-
cpe:2.3:o:contiki-ng:contiki-ng:4.1
-
cpe:2.3:o:contiki-ng:contiki-ng:4.2
-
cpe:2.3:o:contiki-ng:contiki-ng:4.3
-
cpe:2.3:o:contiki-ng:contiki-ng:4.4