CVE-2023-5310

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
OR cpe:2.3:h:silabs:z-wave_long_range_700:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:z-wave_long_range_800:-:*:*:*:*:*:*:*

History

21 Dec 2023, 18:02

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.7
v2 : unknown
v3 : 6.5
First Time Silabs z-wave Long Range 800
Silabs z-wave Software Development Kit
Silabs
Silabs z-wave Long Range 700
CWE NVD-CWE-noinfo
CPE cpe:2.3:h:silabs:z-wave_long_range_800:-:*:*:*:*:*:*:*
cpe:2.3:a:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:h:silabs:z-wave_long_range_700:-:*:*:*:*:*:*:*
References () https://github.com/SiliconLabs/gecko_sdk/releases - () https://github.com/SiliconLabs/gecko_sdk/releases - Release Notes
References () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - Permissions Required
Summary
  • (es) Existe una vulnerabilidad de denegación de servicio en todos los controladores y dispositivos de endpoint Z-Wave de Silicon Labs que ejecutan Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) y versiones anteriores. Este ataque solo puede ser llevado a cabo por dispositivos en la red que envían un flujo de paquetes al dispositivo.

15 Dec 2023, 16:53

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-15 16:15

Updated : 2023-12-21 18:02


NVD link : CVE-2023-5310

Mitre link : CVE-2023-5310

CVE.ORG link : CVE-2023-5310


JSON object : View

Products Affected

silabs

  • z-wave_long_range_800
  • z-wave_software_development_kit
  • z-wave_long_range_700
CWE
NVD-CWE-noinfo CWE-754

Improper Check for Unusual or Exceptional Conditions