CVE-2023-5310

Summary

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.

Affected Software

Weaknesses

• CWE-248: CWE-248 Uncaught Exception

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/SiliconLabs/gecko_sdk/releases
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/SiliconLabs/gecko_sdk/releases
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1

• ←Previous
• Next→