VULNERABILITY INTELLIGENCE
CVE-2023-46870
CVSS score7.3 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2024-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-276