CVE-2024-3052highCWE-248

CVE-2024-3052: high-severity vulnerability in silabs.com Z/IP Gateway SDK

Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability

Published · Updated

Follow this CVE+ Monitor Z/IP Gateway SDK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
silabs.com · Z/IP Gateway SDK
Related CVEs — silabs.com Z/IP Gateway SDK

In the same product, most dangerous first.

CVE-2023-4489MEDIUMZ/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption KeyEPSS 0.5%CVE-2024-3051HIGHZ/IP Gateway Device Reset Locally Denial of Service VulnerabilityEPSS 0.5%