net: shell: Improper input validation
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.7epss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
Affected products
zephyrproject-rtos · zephyr