can: denial-of-service can be triggered by a crafted CAN frame (zephyrproject-rtos zephyr)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.70 % · percentile 53 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- zephyr
- NVD status
- Modified
Description
The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN ID matching an installed filter in the vulnerable node (this can easily be guessed based on CAN traffic analyses). The frame must contain the opposite RTR bit as what the filter installed in the vulnerable node contains (if the filter matches RTR frames, the frame must be a data frame or vice versa).
Weaknesses (CWE)
- CWE-400 — Uncontrolled Resource Consumption
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.2 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H | zephyr |
| CVSS 3.1 | HIGH 8.2 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H | NVD · vulnerabilities@zephyrproject.org (Secondary) |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-34983
- GCVE · GCVE-0-2022-2741
Affected configurations (NVD CPE)
cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*≤ 3.1.0
Affected products
| Product | Versions |
|---|---|
| zephyrproject-rtos · zephyr | affected unspecified ≤ v3.1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |