CVE-2022-40480

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-40480
Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attackers to cause a Denial of Service (DoS) via a crafted ConReq packet.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://blediff.github.io/ Technical Description Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:microchip:dt100112_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:microchip:dt100112:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:nordicsemi:nrf5340-dk_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nordicsemi:nrf5340-dk:-:*:*:*:*:*:*:*
History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-400 NVD-CWE-noinfo

16 Feb 2023, 18:06

Type Values Removed Values Added
References (MISC) https://blediff.github.io/ - (MISC) https://blediff.github.io/ - Technical Description, Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
First Time Nordicsemi
Microchip dt100112 Firmware
Nordicsemi nrf5340-dk Firmware
Nordicsemi nrf5340-dk
Microchip
Microchip dt100112
CWE CWE-400
CPE cpe:2.3:h:microchip:dt100112:-:*:*:*:*:*:*:*
cpe:2.3:o:nordicsemi:nrf5340-dk_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:nordicsemi:nrf5340-dk:-:*:*:*:*:*:*:*
cpe:2.3:o:microchip:dt100112_firmware:-:*:*:*:*:*:*:*

08 Feb 2023, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-02-08 00:15

Updated : 2023-12-10 14:48

NVD link : CVE-2022-40480

Mitre link : CVE-2022-40480

CVE.ORG link : CVE-2022-40480

JSON object : View

Products Affected

microchip

  • dt100112
  • dt100112_firmware

nordicsemi

  • nrf5340-dk_firmware
  • nrf5340-dk
CWE
NVD-CWE-noinfo