CVE-2020-15532

Katalog CVE

CVSS 6.5 · Medium EPSS 1,2%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada silabs bluetooth low energy software development kit. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles.

Rincian

Terbit di NVD

20 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/darkmentorllc/jackbnimble/blob/master/host/pocs/silabs_efr32_extadv_dos.py exploit · advisory pihak ketiga
• https://github.com/darkmentorllc/publications/tree/master/2020/TI_SILABS_BLE_RCEs advisory pihak ketiga
• https://www.blackhat.com/us-20/briefings/schedule/#finding-new-bluetooth-low-energy-exploits-via-reverse-engin... advisory pihak ketiga