CVE-2021-3435

Name of the Vulnerable Software and Affected Versions Zephyr versions >= v2.4.0

Description The issue is related to information leakage in the le ecred conn req() function, which is caused by the use of an uninitialized resource. This is classified as a CWE-908 vulnerability.

Recommendations For Zephyr versions >= v2.4.0, consider disabling the le ecred conn req() function until a patch is available to prevent potential information leakage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.