CVE-2020-13599

published 2021-05-25

CVE-2020-13599: Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see…

Priority P4 10 low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q

Affected

4 ranges

Vendor	Product	Version range	Fixed in
zephyrproject-rtos	zephyr	>= 1.14.2 < unspecified	unspecified
zephyrproject-rtos	zephyr	>= 2.3.0 < unspecified	unspecified
zephyrproject	zephyr	<= 1.14.2	—
zephyrproject	zephyr	2.0.0 – 2.3.0	—

CVSS provenance

nvd v3.1 3.3 LOW CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-276