CVE-2015-8732

CVE-2015-8732 describes an out-of-bounds read vulnerability in the ZigBee ZCL dissector within Wireshark versions 1.12.x prior to 1.12.9 and 2.0.x prior to 2.0.1. This flaw, specifically within the dissect_zcl_pwr_prof_pwrprofstatersp function, arises from a lack of validation for the Total Profile Number field. Rated with a CVSS score of 5.5 (Medium), this vulnerability can be triggered by a remote attacker sending a specially crafted packet, leading to a denial of service through an application crash. The attack requires user interaction (UI:R) to process the malicious packet, but the attack complexity is low (AC:L). While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit proof-of-concept (EDB-38995) is publicly available. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.