Lucene search

SilabsCVELIST:CVE-2023-5310

HistoryDec 15, 2023 - 4:05 p.m.

CVE-2023-5310 Z-Wave Denial of Service caused by Stream of Packets

2023-12-1516:05:15

CWE-248

Silabs

www.cve.org

cve-2023-5310

denial of service

z-wave

silicon labs

vulnerability

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

Percentile

12.7%

JSON

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Gecko SDK",
    "vendor": "silabs.com",
    "versions": [
      {
        "lessThanOrEqual": "7.20.3",
        "status": "affected",
        "version": "0",
        "versionType": "LessThan"
      }
    ]
  }
]

References

github.com/SiliconLabs/gecko_sdk/releases

siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

EPSS

Percentile

12.7%

JSON

Related for CVELIST:CVE-2023-5310