CVE-2023-5310

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:h:silabs:z-wave_long_range_700:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:z-wave_long_range_800:-:*:*:*:*:*:*:*
cpe:2.3:a:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*

History

27 Sep 2024, 16:15

Type Values Removed Values Added
CWE CWE-754 CWE-248
Summary (en) A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device. (en) A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.

21 Dec 2023, 18:02

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
References () https://github.com/SiliconLabs/gecko_sdk/releases - () https://github.com/SiliconLabs/gecko_sdk/releases - Release Notes
References () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - Permissions Required
CPE cpe:2.3:h:silabs:z-wave_long_range_800:-:*:*:*:*:*:*:*
cpe:2.3:a:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
cpe:2.3:h:silabs:z-wave_long_range_700:-:*:*:*:*:*:*:*

15 Dec 2023, 16:53

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-15 16:15

Updated : 2024-09-27 16:15


NVD link : CVE-2023-5310

Mitre link : CVE-2023-5310

CVE.ORG link : CVE-2023-5310


JSON object : View

Products Affected

silabs

  • z-wave_long_range_800
  • z-wave_software_development_kit
  • z-wave_long_range_700
CWE
NVD-CWE-noinfo CWE-248

Uncaught Exception