CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-1638

The documentation specifies that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC defines for a Bluetooth characteristic: Attribute read/write permission with LE Secure Connection encryption. If set, requires that LE Secure Connections is used for read/write access, however this is only true when it is combined with other permissions, namely BT_GATT_PERM_READ_ENCRYPT/BT_GATT_PERM_READ_AUTHEN (for read) or BT_GATT_PERM_WRITE_ENCRYPT/BT_GATT_PERM_WRITE_AUTHEN (for write), if these additional permissions are not set (even in secure connections only mode) then the stack does not perform any permission checks on these characteristics and they can be freely written/read.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.6%

CVSS Severity

CVSS v3 Score 8.2

References

Products affected by CVE-2024-1638

Zephyrproject » Zephyr » Version: N/A

cpe:2.3:o:zephyrproject:zephyr:-
Zephyrproject » Zephyr » Version: 1.0.0

cpe:2.3:o:zephyrproject:zephyr:1.0.0
Zephyrproject » Zephyr » Version: 1.1.0

cpe:2.3:o:zephyrproject:zephyr:1.1.0
Zephyrproject » Zephyr » Version: 1.10.0

cpe:2.3:o:zephyrproject:zephyr:1.10.0
Zephyrproject » Zephyr » Version: 1.11.0

cpe:2.3:o:zephyrproject:zephyr:1.11.0
Zephyrproject » Zephyr » Version: 1.12.0

cpe:2.3:o:zephyrproject:zephyr:1.12.0
Zephyrproject » Zephyr » Version: 1.13.0

cpe:2.3:o:zephyrproject:zephyr:1.13.0
Zephyrproject » Zephyr » Version: 1.14.0

cpe:2.3:o:zephyrproject:zephyr:1.14.0
Zephyrproject » Zephyr » Version: 1.14.1

cpe:2.3:o:zephyrproject:zephyr:1.14.1
Zephyrproject » Zephyr » Version: 1.14.2

cpe:2.3:o:zephyrproject:zephyr:1.14.2
Zephyrproject » Zephyr » Version: 1.14.3

cpe:2.3:o:zephyrproject:zephyr:1.14.3
Zephyrproject » Zephyr » Version: 1.2.0

cpe:2.3:o:zephyrproject:zephyr:1.2.0
Zephyrproject » Zephyr » Version: 1.3.0

cpe:2.3:o:zephyrproject:zephyr:1.3.0
Zephyrproject » Zephyr » Version: 1.4.0

cpe:2.3:o:zephyrproject:zephyr:1.4.0
Zephyrproject » Zephyr » Version: 1.5.0

cpe:2.3:o:zephyrproject:zephyr:1.5.0
Zephyrproject » Zephyr » Version: 1.6.0

cpe:2.3:o:zephyrproject:zephyr:1.6.0
Zephyrproject » Zephyr » Version: 1.6.1

cpe:2.3:o:zephyrproject:zephyr:1.6.1
Zephyrproject » Zephyr » Version: 1.6.99

cpe:2.3:o:zephyrproject:zephyr:1.6.99
Zephyrproject » Zephyr » Version: 1.7.0

cpe:2.3:o:zephyrproject:zephyr:1.7.0
Zephyrproject » Zephyr » Version: 1.7.1

cpe:2.3:o:zephyrproject:zephyr:1.7.1
Zephyrproject » Zephyr » Version: 1.7.99

cpe:2.3:o:zephyrproject:zephyr:1.7.99
Zephyrproject » Zephyr » Version: 1.8.0

cpe:2.3:o:zephyrproject:zephyr:1.8.0
Zephyrproject » Zephyr » Version: 1.8.99

cpe:2.3:o:zephyrproject:zephyr:1.8.99
Zephyrproject » Zephyr » Version: 1.9.0

cpe:2.3:o:zephyrproject:zephyr:1.9.0
Zephyrproject » Zephyr » Version: 1.9.1

cpe:2.3:o:zephyrproject:zephyr:1.9.1
Zephyrproject » Zephyr » Version: 1.9.2

cpe:2.3:o:zephyrproject:zephyr:1.9.2
Zephyrproject » Zephyr » Version: 2.0.0

cpe:2.3:o:zephyrproject:zephyr:2.0.0
Zephyrproject » Zephyr » Version: 2.1.0

cpe:2.3:o:zephyrproject:zephyr:2.1.0
Zephyrproject » Zephyr » Version: 2.2.0

cpe:2.3:o:zephyrproject:zephyr:2.2.0
Zephyrproject » Zephyr » Version: 2.3.0

cpe:2.3:o:zephyrproject:zephyr:2.3.0
Zephyrproject » Zephyr » Version: 2.4.0

cpe:2.3:o:zephyrproject:zephyr:2.4.0
Zephyrproject » Zephyr » Version: 2.5.0

cpe:2.3:o:zephyrproject:zephyr:2.5.0
Zephyrproject » Zephyr » Version: 2.5.1

cpe:2.3:o:zephyrproject:zephyr:2.5.1
Zephyrproject » Zephyr » Version: 2.6.0

cpe:2.3:o:zephyrproject:zephyr:2.6.0
Zephyrproject » Zephyr » Version: 2.6.1

cpe:2.3:o:zephyrproject:zephyr:2.6.1
Zephyrproject » Zephyr » Version: 2.79.0

cpe:2.3:o:zephyrproject:zephyr:2.79.0
Zephyrproject » Zephyr » Version: 2.8.0

cpe:2.3:o:zephyrproject:zephyr:2.8.0
Zephyrproject » Zephyr » Version: 2.81.0

cpe:2.3:o:zephyrproject:zephyr:2.81.0
Zephyrproject » Zephyr » Version: 2.82.0

cpe:2.3:o:zephyrproject:zephyr:2.82.0
Zephyrproject » Zephyr » Version: 2.83.0

cpe:2.3:o:zephyrproject:zephyr:2.83.0
Zephyrproject » Zephyr » Version: 2.84.0

cpe:2.3:o:zephyrproject:zephyr:2.84.0
Zephyrproject » Zephyr » Version: 2.85.0

cpe:2.3:o:zephyrproject:zephyr:2.85.0
Zephyrproject » Zephyr » Version: 2.86.0

cpe:2.3:o:zephyrproject:zephyr:2.86.0
Zephyrproject » Zephyr » Version: 2.87.0

cpe:2.3:o:zephyrproject:zephyr:2.87.0
Zephyrproject » Zephyr » Version: 2.88.0

cpe:2.3:o:zephyrproject:zephyr:2.88.0
Zephyrproject » Zephyr » Version: 2.89.0

cpe:2.3:o:zephyrproject:zephyr:2.89.0
Zephyrproject » Zephyr » Version: 2.90.0

cpe:2.3:o:zephyrproject:zephyr:2.90.0
Zephyrproject » Zephyr » Version: 2.91.0

cpe:2.3:o:zephyrproject:zephyr:2.91.0
Zephyrproject » Zephyr » Version: 2.92.0

cpe:2.3:o:zephyrproject:zephyr:2.92.0
Zephyrproject » Zephyr » Version: 2.93.0

cpe:2.3:o:zephyrproject:zephyr:2.93.0
Zephyrproject » Zephyr » Version: 2.94.0

cpe:2.3:o:zephyrproject:zephyr:2.94.0
Zephyrproject » Zephyr » Version: 2.95.0

cpe:2.3:o:zephyrproject:zephyr:2.95.0
Zephyrproject » Zephyr » Version: 3.0.0

cpe:2.3:o:zephyrproject:zephyr:3.0.0
Zephyrproject » Zephyr » Version: 3.0.1

cpe:2.3:o:zephyrproject:zephyr:3.0.1
Zephyrproject » Zephyr » Version: 3.1.0

cpe:2.3:o:zephyrproject:zephyr:3.1.0
Zephyrproject » Zephyr » Version: 3.2.0

cpe:2.3:o:zephyrproject:zephyr:3.2.0
Zephyrproject » Zephyr » Version: 3.2.01

cpe:2.3:o:zephyrproject:zephyr:3.2.01
Zephyrproject » Zephyr » Version: 3.2.1

cpe:2.3:o:zephyrproject:zephyr:3.2.1
Zephyrproject » Zephyr » Version: 3.2.31

cpe:2.3:o:zephyrproject:zephyr:3.2.31
Zephyrproject » Zephyr » Version: 3.2.40

cpe:2.3:o:zephyrproject:zephyr:3.2.40
Zephyrproject » Zephyr » Version: 3.2.41

cpe:2.3:o:zephyrproject:zephyr:3.2.41
Zephyrproject » Zephyr » Version: 3.4.0

cpe:2.3:o:zephyrproject:zephyr:3.4.0
Zephyrproject » Zephyr » Version: 3.5.0

cpe:2.3:o:zephyrproject:zephyr:3.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-1638

Products

Pricing

Contact Us