Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-10068 | In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, res… | Medium (5.1) | 2020-06-05 | Environment Specific |
| CVE-2020-10063 | A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of … | Medium (6.8) | 2020-06-05 | Environment Specific |
| CVE-2020-10062 | An off-by-one error in the Zephyr project MQTT packet length decoder can result in memory corruption and possible remot… | Critical (9.0) | 2020-06-05 | Environment Specific |
| CVE-2020-10061 | Improper handling of the full-buffer case in the Zephyr Bluetooth implementation can result in memory corruption. This … | High (8.1) | 2020-06-05 | Environment Specific |
| CVE-2020-9859 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13… | High (7.8) | 2020-06-05 | Environment Specific |