CVE-2025-10457

Katalog CVE

CVSS 8.1 · High EPSS 0,40%

Kerentanan Improperly Implemented Security Check for Standard pada zephyrproject zephyr. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, whether the device has initiated a connection request. Instead, it relies solely on identifier matching.

Rincian

Terbit di NVD

19 September 2025

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-358: Improperly Implemented Security Check for Standard

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 31,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xqj6-vh76-2vv8 exploit · advisory vendor