CVE-2020-27890

2020-10-2720:26:11

mitre

www.cve.org

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute’s value.

References

github.com/zigbeeprotocol/Z-Fuzzer/tree/master/vulnerabilities

www.ti.com/tool/Z-STACK