611 matches found
CVE-2020-27890
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...
CVE-2020-27892
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd...
CVE-2020-27891
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal...
Design/Logic Flaw
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd...
Information disclosure
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...
CVE-2020-27890
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...
CVE-2020-27890
The vulnerability CVE-2020-27890 affects TI CC2538 devices using Z-Stack 3.0.1, where the Zigbee ZCL Write Attributes No Response message is not processed correctly. The issue causes a crash in zclParseInWriteCmd() and prevents updating the targeted attribute’s value, potentially leaving the attr...
CVE-2020-27891
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal...
CVE-2020-27891
CVE-2020-27891 affects TI CC2538 with Z-Stack 3.0.1 where a ZCL Read Reporting Configuration Response is not properly processed, causing a crash in zclHandleExternal(). Public details show CVSS v3.1 base score 7.5 (Network attack, low complexity, no privileges required, availability impact HIGH) ...
CVE-2020-27892
CVE-2020-27892 affects TI CC2538 devices running Z-Stack 3.0.1. The Zigbee protocol stack fails to correctly process ZCL Discover Commands Received/Generated Response messages, causing a crash in zclParseInDiscCmdsRspCmd(). The NVD entry lists CVSS v2/3 base scores of 5.0 (MEDIUM) and 7.5 (HIGH) ...
CVE-2020-27892
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd...
CVE-2020-27890: Undefined Security Weakness
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd and does not update the specific attribute's value...
CVE-2020-27891: Undefined Security Weakness
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal...
CVE-2020-27892: Undefined Security Weakness
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd...
sierrainstruments.com Cross Site Scripting vulnerability OBB-1305784
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-13593
The Bluetooth Low Energy Secure Manager Protocol SMP implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radi...
Design/Logic Flaw
The Bluetooth Low Energy Secure Manager Protocol SMP implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radi...
CVE-2020-13593
The CVE-2020-13593 entry concerns TI’s SimpleLink CC2640R2-SDK (up to v2.2.3) where the Bluetooth Low Energy SMP implementation allows the Diffie-Hellman check to be skipped if Link Layer encryption is set up earlier. This enables an attacker within radio range to establish an encrypted session w...
CVE-2020-13593: Improper Verification of Cryptographic Signature
The Bluetooth Low Energy Secure Manager Protocol SMP implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connection pairing to be skipped if the Link Layer encryption setup is performed earlier. An attacker in radi...
sensorinstruments.de Cross Site Scripting vulnerability OBB-1261152
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...