CVE-2022-0553 — Possible to retrieve uncrypted firmware image

CVE-2022-0553

Possible to retrieve uncrypted firmware image PUBLISHED

Description (CNA)

There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily.

Affected (CNA)

Vendor / product	Versions
zephyrproject-rtos / zephyr	affected unspecified through v3.0

CWE

CWE-200

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wrj2-9vj9-rrcp

ADP enrichment

CVE

No English description supplied.

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wrj2-9vj9-rrcp

CISA-ADP

No English description supplied.

No references supplied.