CVE-2022-24939

2022-11-1800:15:09

CWE-119

CWE-787

[email protected]

web.nvd.nist.gov

malformed packet

stack overflow

ember znet

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

23.6%

JSON

A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error.

Affected configurations

Nvd

Node

silabsgecko_software_development_kitMatch-

silabszigbee_emberznetMatch-

VendorProductVersionCPE
silabsgecko_software_development_kit-cpe:2.3:a:silabs:gecko_software_development_kit:-:*:*:*:*:*:*:*
silabszigbee_emberznet-cpe:2.3:a:silabs:zigbee_emberznet:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silabs	gecko_software_development_kit	-	cpe:2.3:a:silabs:gecko_software_development_kit:-:::::::*
silabs	zigbee_emberznet	-	cpe:2.3:a:silabs:zigbee_emberznet:-:::::::*