CVE-2020-10059
published 2020-05-11CVE-2020-10059: The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures…
PriorityP424medium4.8CVSS 3.1
AVNACHPRNUINSUCLINAL
EPSS
1.18%
63.8th percentile
The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zephyrproject-rtos | zephyr | >= 2.1.0 < unspecified | unspecified |
| zephyrproject-rtos | zephyr | >= 2.2.0 < unspecified | unspecified |
| zephyrproject | zephyr | — | — |
| zephyrproject | zephyr | — | — |
| zephyrproject | zephyr | >= 2.1.0 < 2.4.0 | 2.4.0 |
CVSS provenance
nvdv3.14.8MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fhjj-6gr2-w5wg: The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack
ghsa_unreviewed·2022-05-24
CVE-2020-10059 [MEDIUM] GHSA-fhjj-6gr2-w5wg: The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack
The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.
GHSA
GHSA-435h-hqgw-fqgf: In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two different places
ghsa_unreviewed·2022-05-24·CVSS 4.8
CVE-2020-10060 [MEDIUM] CWE-824 GHSA-435h-hqgw-fqgf: In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two different places
In updatehub_probe, right after JSON parsing is complete, objects\[1] is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an information leak. Recommend disabling updatehub until such a time as a fix can be made available. Provided the fix in CVE-2020-10059 is applied, the attack requires compromise of the server. See NCC-ZEP-030 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10059https://github.com/zephyrproject-rtos/zephyr/pull/24954https://github.com/zephyrproject-rtos/zephyr/pull/24997https://github.com/zephyrproject-rtos/zephyr/pull/24999https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-36https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10059https://github.com/zephyrproject-rtos/zephyr/pull/24954https://github.com/zephyrproject-rtos/zephyr/pull/24997https://github.com/zephyrproject-rtos/zephyr/pull/24999https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-36
2020-05-11
Published