Zephyr

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:zephyrproject:zephyr:2.2.0:*:*:*:*:*:*:*

part: o version: 2.2.0 update: *

VendorZephyrproject (eef6daf7-3b78-5888-804c-646f0e695bd1)
ProductZephyr (f20ab476-7412-54eb-9a65-7712653f3d16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10059 vulnerable 2026-06-08 05:16:34.103462 UpdateHub Module Explicitly Disables TLS Verification
MEDIUM (4.8)
The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.
Published: 2020-05-11T22:26:16.442Z
Updated: 2024-09-17T02:07:14.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10022 vulnerable 2026-06-08 05:16:34.044472 UpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array
CRITICAL (9)
A malformed JSON payload that is received from an UpdateHub server may trigger memory corruption in the Zephyr OS. This could result in a denial of service in the best case, or code execution in the worst case. See NCC-NCC-016 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.
Published: 2020-05-11T22:26:12.494Z
Updated: 2024-09-16T23:45:41.536Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.