CVE-2022-2993

There is an error in the condition of the last if-statement in the function smp_check_keys. It was rejecting current keys if all requirements were unmet.

Score

CVSS 3.1 9.8 Critical

Status

Modified - vulnerabilities@zephyrproject.org

Published

2022-12-09

Last modified

2025-04-22

Weaknesses

CWE-670

Affected products

• Zephyr (Zephyrproject)
• Zephyr (Zephyrproject-rtos)

References

• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3286-jgjx-8cvr