What’s Vulnerable › Vulnerabilities

CVE-2023-0779: net: shell: Improper input validation

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-30 · updated 2026-06-17
• Weakness: CWE-20

Description

At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.

Affected products

• zephyrproject zephyr: through 3.2.0

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xj8-6989-r549
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-9xj8-6989-r549

Get alerted when CVE-2023-0779 or the next vulnerability affects your stack