CVE-2020-10072: Improper Handling of Insufficient Permissions or Privileges in zephyr

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-10072.

Q: What is the severity of CVE-2020-10072?

The severity of CVE-2020-10072 is medium with a CVSS score of 5.3.

Q: What is the affected software for CVE-2020-10072?

The affected software for CVE-2020-10072 is Zephyr versions >= v1.14.2 and >= v2.2.0.

Published May 24, 2021

Updated

Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc

Affected Software

2 affected components

zephyrproject zephyr<=1.14.2

zephyrproject zephyr>=2.0.0<=2.2.0

Event History

May 24, 2021

CVE Published

via MITRE·09:40 PM

Data Sourced

via MITRE·09:40 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-10072.

What is the severity of CVE-2020-10072?

The severity of CVE-2020-10072 is medium with a CVSS score of 5.3.

What is the affected software for CVE-2020-10072?

The affected software for CVE-2020-10072 is Zephyr versions >= v1.14.2 and >= v2.2.0.

What is the CWE of CVE-2020-10072?

The CWE of CVE-2020-10072 is CWE-280 (Improper Handling of Insufficient Permissions or Privileges).

Where can I find more information about CVE-2020-10072?

You can find more information about CVE-2020-10072 at the following link: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc