CVE-2023-46870

7.3 highEPSS 0.4%

High (7.3). EPSS 0.4% chance of exploitation in the next 30 days.

extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2024-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/Chapoly1305/CVE-2023-46870
https://github.com/Chapoly1305/CVE-2023-46870

Check your stack JSON