CVE-2020-15531

Katalog CVE

CVSS 8.8 · High EPSS 3,2%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada silabs bluetooth low energy software development kit. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles.

Rincian

Terbit di NVD

20 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

3,2% peluang dieksploitasi; lebih tinggi dari 87,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/silabs_efr32_extadv_rce.py exploit · advisory pihak ketiga
• https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs advisory pihak ketiga
• https://www.blackhat.com/us-20/briefings/schedule/#finding-new-bluetooth-low-energy-exploits-via-reverse-engin... advisory pihak ketiga
• https://www.youtube.com/watch?v=saoTr1NwdzM exploit · advisory pihak ketiga