CVE-2024-5754 HIGH

CVE-2024-5754: BT: Encryption procedure host vulnerability

Vendor Zephyrproject-Rtos

Product Zephyr

Weakness CWE-807

Published September 13, 2024

Last update September 17, 2025

View on NVD All CVEs

CVSS base score

8.2/10

Attack vector Adjacent

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

BT: Encryption procedure host vulnerability

Key dates

02Disclosure timeline

September 13, 2024 CVE published

September 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-5754 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/807.html

Related vulnerabilities

04Related CVE

CVE-2026-25958 Cube privilege escalation via a specially crafted request CVE-2026-35617 OpenClaw < 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayName CVE-2026-12058 CVE-2026-35670 OpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat CVE-2019-25711 SpotFTP Password Recover 2.4.2 Denial of Service via Name Field