cve/2023/CVE-2023-46870.md

18 lines
743 B
Markdown
Raw Normal View History

2024-05-28 08:49:17 +00:00
### [CVE-2023-46870](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46870)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/Chapoly1305/CVE-2023-46870