High severity8.2NVD Advisory· Published Feb 1, 2023· Updated Jun 17, 2026

CVE-2022-30904

Description

In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU.

Affected products

Bestechnic/Bluetooth Mesh SDKdescription
Bestechnic/Bluetooth Mesh SDKllm-fuzzy
Range: = V1.0

Patches

Vulnerability mechanics

References

docs.google.com/document/d/1is3dYwMcRIkhjvujzi5OgnaGBsQVtlew/editnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000