CVE-2023-34597

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-34597
A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/iot-sec23/IoT-CVE/blob/main/Fibaro%20Motion%20Sensor%20Vulnerability%20Report.pdf Exploit Third Party Advisory
https://www.fibaro.com/en/products/motion-sensor/%3B
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:fibaro:fgms-001_firmware:3.4:*:*:*:*:*:*:*
cpe:2.3:h:fibaro:fgms-001:-:*:*:*:*:*:*:*
History

07 Nov 2023, 04:15

Type Values Removed Values Added
References
  • {'url': 'https://www.fibaro.com/en/products/motion-sensor/;', 'name': 'https://www.fibaro.com/en/products/motion-sensor/;', 'tags': ['Product'], 'refsource': 'MISC'}
  • () https://www.fibaro.com/en/products/motion-sensor/%3B -

27 Jun 2023, 18:31

Type Values Removed Values Added
First Time Fibaro fgms-001 Firmware
Fibaro fgms-001
Fibaro
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:h:fibaro:fgms-001:-:*:*:*:*:*:*:*
cpe:2.3:o:fibaro:fgms-001_firmware:3.4:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References (MISC) https://www.fibaro.com/en/products/motion-sensor/; - (MISC) https://www.fibaro.com/en/products/motion-sensor/; - Product
References (MISC) https://github.com/iot-sec23/IoT-CVE/blob/main/Fibaro%20Motion%20Sensor%20Vulnerability%20Report.pdf - (MISC) https://github.com/iot-sec23/IoT-CVE/blob/main/Fibaro%20Motion%20Sensor%20Vulnerability%20Report.pdf - Exploit, Third Party Advisory

20 Jun 2023, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-20 13:15

Updated : 2023-12-10 15:01

NVD link : CVE-2023-34597

Mitre link : CVE-2023-34597

CVE.ORG link : CVE-2023-34597

JSON object : View

Products Affected

fibaro

  • fgms-001_firmware
  • fgms-001
CWE
NVD-CWE-noinfo