What is CVE-2023-46870?

CVE-2023-46870 is a high-severity vulnerability in N/a, classified under Incorrect Default Permissions. CVSS score: 7.3/10. Published 2024-05-14.

How severe is CVE-2023-46870?

High severity. CVSS v3 base score is 7.3 out of 10.

Is CVE-2023-46870 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2023-46870

extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts.

EPSS: 0.004 (28.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

Public proof-of-concept exploits

Chapoly1305/CVE-2023-46870

References

cve@mitre.org

Frequently asked questions

What is CVE-2023-46870?: CVE-2023-46870 is a high-severity vulnerability in N/a, classified under Incorrect Default Permissions. CVSS score: 7.3/10. Published 2024-05-14.
How severe is CVE-2023-46870?: High severity. CVSS v3 base score is 7.3 out of 10.
Is CVE-2023-46870 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.