PT-2021-9659 · Zephyr · Zephyr

Yuri Kramarz · Published 2021-05-24 · Updated 2022-04-06 · CVE-2020-13599

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zephyr versions 1.14.2 and later, 2.3.0 and later

Description The issue is related to incorrect default permissions, which can lead to security problems with settings and littlefs.

Recommendations For Zephyr versions 1.14.2 and later, 2.3.0 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-13599

GHSA-5QHG-J6WC-4F6Q

Affected Products

Zephyr

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-13599 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13599 · Vendor Advisory
• http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q · Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1199 · Note