← Database

CVE-2022-30904

HIGH CVSS: 8.2 Published: 2023-02-01 Modified: 2026-06-17

Description

In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU.

Affected Platforms

Bestechnic Bluetooth Mesh Software Development KitBestechnic Bes2300

Weakness Type

CWE-787, CWE-787

References