CVE-2024-7138

{"id": "CVE-2024-7138", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "product-security@silabs.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-12-19T20:15:07.947", "references": [{"url": "https://community.silabs.com/068Vm00000I5mjD", "source": "product-security@silabs.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "product-security@silabs.com", "description": [{"lang": "en", "value": "CWE-617"}]}], "descriptions": [{"lang": "en", "value": "An assert may be triggered, causing a temporary denial of service when a peer device sends a specially crafted malformed L2CAP packet. If a watchdog timer is not enabled, a hard reset is required to recover the device."}, {"lang": "es", "value": "Se puede activar una aserci\u00f3n que provoque una denegaci\u00f3n temporal del servicio cuando un dispositivo de pares env\u00eda un paquete L2CAP mal formado especialmente manipulado. Si no se habilita un temporizador de vigilancia, se requiere un reinicio completo para recuperar el dispositivo."}], "lastModified": "2025-05-28T14:15:32.080", "sourceIdentifier": "product-security@silabs.com"}