[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqjrCfdQmuGImO_aP9U5EOngDryKN7bokJZ6PXTZGyoU":3,"g5a-risk:CVE-2020-10059":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":55,"references":56,"referencesCount":77,"weaknesses":78,"weaknessesCount":87,"isActivelyExploited":88,"cisaInfo":27,"otxData":27,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":125,"notableEvents":126},"CVE-2020-10059","What is CVE-2020-10059?","The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signatures. However, there is no benefit to using DTLS without the peer checking. See NCC-ZEP-018 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.","The UpdateHub module disables DTLS peer checking, which allows for a man in the middle attack. This is mitigated by firmware images requiring valid signature...","2020-05-11T23:15:11.973","2020-06-05T18:15:12.247",4.8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","NONE","UNCHANGED","LOW","MEDIUM",null,2.2,2.5,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"vulnerabilities@zephyrproject.org","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":26,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":23,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:P","PARTIAL",5.8,8.6,4.9,0.0121,[43,43,43,43,43,43,43],"Medium",[47,52],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"zephyrproject","zephyr","2.1.0","cpe:2.3:o:zephyrproject:zephyr:2.1.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"2.2.0","cpe:2.3:o:zephyrproject:zephyr:2.2.0:*:*:*:*:*:*:*",2,[57,61,67,70,73],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fdocs.zephyrproject.org\u002Flatest\u002Fsecurity\u002Fvulnerabilities.html#cve-2020-10059","Zephyrproject",[],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fpull\u002F24954","GitHub",[65,66],"Patch","Third Party Advisory",{"url":68,"source":63,"tags":69},"https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fpull\u002F24997",[65,66],{"url":71,"source":63,"tags":72},"https:\u002F\u002Fgithub.com\u002Fzephyrproject-rtos\u002Fzephyr\u002Fpull\u002F24999",[65,66],{"url":74,"source":75,"tags":76},"https:\u002F\u002Fzephyrprojectsec.atlassian.net\u002Fbrowse\u002FZEPSEC-36","Atlassian",[66],5,[79],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2020-10059? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-10059, a medium severity cyber security vulnerability from 2020. The UpdateHub module disables DTLS peer checking, which a...","CVE-2020-10059, CVE-2020-10059 vulnerability, CVE-2020-10059 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, zephyrproject security, zephyr vulnerability","\u002Fwhat-is\u002Fcve-2020-10059",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-10059","Cybersecurity","CVE-2020-10059, CVE-2020-10059 vulnerability, CVE-2020-10059 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":27,"Negate":27,"Nodes":117},[118],{"Operator":119,"Negate":27,"CPEMatch":120},"OR",[121,123],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EF33DD80-0286-477C-88A4-FCEC0D80F520",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"677DD0A3-502D-45F1-9CC8-8DDB8F230DFC",[],[],{"lastModified":11,"cacheTime":128,"version":37},1793225927143,{"score":130,"band":131,"action":132,"scoredAt":133},18,"Info","Track","2026-10-28T06:48:33.46241+00:00"]