Zephyr vulnerabilities
4 vulnerabilities
Known vulnerabilities in Zephyr products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Shell2 vulnerabilities
- Getaddrinfo1 vulnerabilities
- Project Manager1 vulnerabilities
CVE-2022-3333zephyr-onezephyr_project_manager+1
EPSS score0.53%
A vulnerability, which was classified as problematic, was found in Zephyr Project Manager up to 3.2.4. Affected is an unknown function of the file /v1/tasks/create/ of the component REST Call Handler. The manipulation of the argument onanimationstart leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 3.2.5 is able to address this issue. It is recommended to upgrade the affected component. VDB-209370 is the identifier assigned to this vulnerability.CVE-2017-14201zephyrshell+1EPSS score1.10%
Use After Free vulnerability in the Zephyr shell allows a serial or telnet connected user to cause denial of service, and possibly remote code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.CVE-2017-14202zephyrshell+1EPSS score0.57%
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all.CVE-2017-14199zephyrgetaddrinfo+1EPSS score1.73%
A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0.