CVE-2022-35623
First published: Mon Aug 15 2022(Updated: )
In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented control packets and access packets with the same SeqAuth
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nordicsemi Nrf5 Sdk For Mesh | =5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-35623.
What is the severity of CVE-2022-35623?
The severity of CVE-2022-35623 is high with a CVSS score of 8.8.
How does the vulnerability in Nordic nRF5 SDK for Mesh 5.0 occur?
The vulnerability in Nordic nRF5 SDK for Mesh 5.0 occurs due to a heap overflow triggered by sending a series of segmented control packets and access packets with the same SeqAuth.
What software is affected by CVE-2022-35623?
The affected software is Nordic nRF5 SDK for Mesh 5.0.
How can I fix CVE-2022-35623?
To fix CVE-2022-35623, it is recommended to update to the latest version of Nordic nRF5 SDK for Mesh.
- collector/nvd-index
- vendor/nordicsemi
- canonical/nordicsemi nrf5 sdk for mesh
- version/nordicsemi nrf5 sdk for mesh/5.0