title: net: shell: Improper input validation
description: At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’s memory layout, further exploitation is possible.
problem types: Improper Input Valiation (CWE-20)
affected:
{
vendor: zephyrproject-rtos
product: zephyr
versions:
version: unspecified, lessThan: v3.3, status: affected, versionType: custom
version: unspecified, lessThanOrEqual: v2.7.4, status: affected, versionType: custom
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
attackVector: ADJACENT_NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
]