CVE-2022-31364 - CVE House
Back to Database
Status published High CVE-2022-31364

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected...

Vulnerability Description

Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-31364

Credits & Attribution

No credits recorded in the NVD database.

References

More from infineon

View All →
CVE-2022-31363
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected...
High 8.2
CVE-2017-15361
The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module...
Medium 5.9

Affected Vendor

Affected Software

cypress bluetooth mesh software development kit
Vulnerable Versions:
bsa0107_05.01.00-bx8-amesh-08

Timeline

Official Publish: February 1st, 2023
Last Modified: March 27th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AC:L/AV:A/A:L/C:H/I:L/PR:L/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.