Infineon Cypress Bluetooth Mesh Software Development Kit Bsa0107 05.01.00-bx8-amesh-08
Approved changes feed: RSS · Atom
cpe:2.3:a:infineon:cypress_bluetooth_mesh_software_development_kit:bsa0107_05.01.00-bx8-amesh-08:*:*:*:*:*:*:*
part: a version: bsa0107_05.01.00-bx8-amesh-08 update: *
| Vendor | Infineon (495908f5-b921-5a66-a482-d00069289790) |
|---|---|
| Product | Cypress Bluetooth Mesh Software Development Kit (aafe5d85-27c4-5a3f-b726-0fcbbf7475c2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-31364 |
vulnerable | 2026-06-08 05:43:40.745533 |
Details available
HIGH (8.2)
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN.
Published: 2023-02-01T00:00:00.000Z
Updated: 2025-03-27T14:30:16.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31363 |
vulnerable | 2026-06-08 05:43:40.745083 |
Details available
HIGH (8.2)
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is pb_transport_handle_frag_. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU.
Published: 2023-02-01T00:00:00.000Z
Updated: 2025-03-27T14:32:20.018Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.