CVE-2023-7060: Zephyrproject Zephyr

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Zephyr OS IP packet handling does not properly drop IP packets arriving on an external interface with a source address equal to 127.0.01 or the destination address.

Affected products

• Zephyrproject Zephyr: before 3.6.0 (fixed in 3.6.0)

Published 2024-03-15. Last modified 2026-06-17.