[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqBOwCrUgq922NXZQb0sTZK1Lx_n9nCytySWUv9iYTEk":3,"g5a-risk:CVE-2020-10060":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":57,"references":58,"referencesCount":38,"weaknesses":83,"weaknessesCount":99,"isActivelyExploited":100,"cisaInfo":27,"otxData":27,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":137,"notableEvents":138},"CVE-2020-10060","What is CVE-2020-10060?","In updatehub_probe, right after JSON parsing is complete, objects\\[1] is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an information leak. Provided the fix in CVE-2020-10059 is applied, the attack requires compromise of the server. See NCC-ZEP-030 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions. version 2.2.0 and later versions.","In updatehub_probe, right after JSON parsing is complete, objects\\[1] is accessed from the output structure in two different places. If the JSON contained le...","2020-05-11T23:15:12.02","2021-10-18T12:35:24.937",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":39,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED","MEDIUM",null,1.2,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"vulnerabilities@zephyrproject.org","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":35,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",8,1.3,6,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":47,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":44,"ConfidentialityImpact":45,"IntegrityImpact":24,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:P","SINGLE","PARTIAL",5.5,4.9,0.01559,[48,48,48,48,48,48,48],"Medium",[52],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"zephyrproject","zephyr","*","cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*",1,[59,64,70,73,76,79],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fdocs.zephyrproject.org\u002Flatest\u002Fsecurity\u002Fvulnerabilities.html#cve-2020-10060","Zephyrproject",[63],"Vendor Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fpull\u002F27865","GitHub",[68,69],"Patch","Third Party Advisory",{"url":71,"source":66,"tags":72},"https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fpull\u002F27889",[68,69],{"url":74,"source":66,"tags":75},"https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fpull\u002F27891",[68,69],{"url":77,"source":66,"tags":78},"https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fpull\u002F27893",[68,69],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fzephyrprojectsec.atlassian.net\u002Fbrowse\u002FZEPSEC-37","Atlassian",[69],[84,92],{"id":85,"name":86,"description":87,"extendedDescription":88,"status":89,"abstraction":90,"structure":91},"CWE-119","Improper Restriction of Operations within the Bounds of a Memory Buffer","The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","Certain languages allow direct addressing of memory locations and do not automatically ensure that these locations are valid for the memory buffer that is being referenced. This can cause read or write operations to be performed on memory locations that may be associated with other variables, data structures, or internal program data.","Stable","Class","Simple",{"id":93,"name":94,"description":95,"extendedDescription":96,"status":97,"abstraction":98,"structure":91},"CWE-824","Access of Uninitialized Pointer","The product accesses or uses a pointer that has not been initialized.","If the pointer contains an uninitialized value, then the value might not point to a valid memory location. This could cause the product to read from or write to unexpected memory locations, leading to a denial of service. If the uninitialized pointer is used as a function call, then arbitrary functions could be invoked. If an attacker can influence the portion of uninitialized memory that is contained in the pointer, this weakness could be leveraged to execute code or perform other attacks.\nDepending on memory layout, associated memory management behaviors, and product operation, the attacker might be able to influence the contents of the uninitialized pointer, thus gaining more fine-grained control of the memory location to be accessed.","Incomplete","Base",2,false,[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2020-10060? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-10060, a medium severity cyber security vulnerability from 2020. In updatehub_probe, right after JSON parsing is complete,...","CVE-2020-10060, CVE-2020-10060 vulnerability, CVE-2020-10060 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, zephyrproject security, zephyr vulnerability","\u002Fwhat-is\u002Fcve-2020-10060",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-10060","Cybersecurity","CVE-2020-10060, CVE-2020-10060 vulnerability, CVE-2020-10060 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128],{"Operator":27,"Negate":27,"Nodes":129},[130],{"Operator":131,"Negate":27,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":134,"VersionStartExcluding":27,"VersionStartIncluding":135,"VersionEndExcluding":136,"VersionEndIncluding":27},"7C2C38E4-CE91-4384-AD78-203DDCE58738","2.1.0","2.4.0",[],[],{"lastModified":11,"cacheTime":140,"version":42},1792450254933,{"score":142,"band":50,"action":143,"scoredAt":144},46,"Plan remediation","2026-10-16T06:48:37.04393+00:00"]