Information disclosure

2020-10-2721:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute’s value.

CPENameOperatorVersion
z-stackeq3.0.1

CPE	Name	Operator	Version
	z-stack	eq	3.0.1

References

github.com/zigbeeprotocol/Z-Fuzzer/tree/master/vulnerabilities

www.ti.com/tool/Z-STACK