CyberSecBulletin

Nordicsemi vulnerabilities

We track 2 vulnerabilities in Nordicsemi products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Nordicsemi vulnerabilities

  • 7.3 High severity

    nrf_sniffer_for_bluetooth: Incorrect Default Permissions

    CVE-2023-46870Nordicsemi

    extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified

  • 8.8 High severity

    Nrf5 SDK For Mesh: Out-of-bounds Write

    CVE-2022-35623Nordicsemi

    In Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a series of segmented control packets and access packets with the same SeqAuth