Lucene search

[email protected]CVE-2023-5310

HistoryDec 15, 2023 - 4:15 p.m.

CVE-2023-5310

2023-12-1516:15:46

NVD-CWE-noinfo

CWE-754

[email protected]

web.nvd.nist.gov

denial of service

vulnerability

silicon labs

z-wave

sdk

cve-2023-5310

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

12.0%

JSON

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.

CPENameOperatorVersion
silabs:z-wave_software_development_kitsilabs z-wave software development kitle7.20.2.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq-
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.19.4.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.19.3.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.19.0.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.17.1.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.17.2.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.18.6.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.18.0.0
silabs:z-wave_software_development_kitsilabs z-wave software development kiteq7.19.1.0

CPE	Name	Operator	Version
silabs:z-wave_software_development_kit	silabs z-wave software development kit	le	7.20.2.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	-
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.19.4.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.19.3.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.19.0.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.17.1.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.17.2.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.18.6.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.18.0.0
silabs:z-wave_software_development_kit	silabs z-wave software development kit	eq	7.19.1.0

Rows per page:

1-10 of 181

References

github.com/SiliconLabs/gecko_sdk/releases

siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1

6.5 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

12.0%

JSON

Related for CVE-2023-5310

prion1 cvelist1