CVE-2020-10072 - Improper Handling of Insufficient Permissions or Privileges in zephyr

MEDIUM

Improper Handling of Insufficient Permissions or Privileges in zephyr

Published May 24, 2021

5.9

MEDIUM

CVSS 3.1

EPSS 0.20%

Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc

Vendor Zephyrproject-Rtos Product Zephyr Default
unknown
Affected
- ≥ v1.14.2, < unspecified
- ≥ v2.2.0, < unspecified

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Zephyrproject-Rtos	Zephyr	unknown	Affected ≥ v1.14.2, < unspecified ≥ v2.2.0, < unspecified

No remediation recorded yet.

Weaknesses (1)

CWE-280

Link	Providers	Tags
http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2537		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner zephyr

Published May 24, 2021

Updated Sep 17, 2024

Reserved Mar 4, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner zephyr

Published May 24, 2021

Updated Sep 17, 2024

GitHub

No data