CVE-2023-5310

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
OR cpe:2.3:h:silabs:z-wave_long_range_700:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:z-wave_long_range_800:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:41

Type Values Removed Values Added
References () https://github.com/SiliconLabs/gecko_sdk/releases - Release Notes () https://github.com/SiliconLabs/gecko_sdk/releases - Release Notes
References () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - Permissions Required () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - Permissions Required
CVSS v2 : unknown
v3 : 6.5
v2 : unknown
v3 : 5.7

27 Sep 2024, 16:15

Type Values Removed Values Added
CWE CWE-754 CWE-248
Summary (en) A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device. (en) A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.

21 Dec 2023, 18:02

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
First Time Silabs z-wave Long Range 800
Silabs
Silabs z-wave Long Range 700
Silabs z-wave Software Development Kit
CPE cpe:2.3:h:silabs:z-wave_long_range_700:-:*:*:*:*:*:*:*
cpe:2.3:h:silabs:z-wave_long_range_800:-:*:*:*:*:*:*:*
cpe:2.3:a:silabs:z-wave_software_development_kit:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://github.com/SiliconLabs/gecko_sdk/releases - () https://github.com/SiliconLabs/gecko_sdk/releases - Release Notes
References () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - () https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1 - Permissions Required

15 Dec 2023, 16:53

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-15 16:15

Updated : 2024-11-21 08:41


NVD link : CVE-2023-5310

Mitre link : CVE-2023-5310

CVE.ORG link : CVE-2023-5310


JSON object : View

Products Affected

silabs

  • z-wave_long_range_700
  • z-wave_long_range_800
  • z-wave_software_development_kit
CWE
CWE-248

Uncaught Exception

NVD-CWE-noinfo