CVE-2024-3043: falha de alta gravidade em silabs.com Ember ZNet SDK
Zigbee co-ordinator realignment packet may lead to denial of service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.5%
An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their network identifier (pan ID), leading to a denial of service. This packet type is not useful in production and should be used only for PHY qualification.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
silabs.com · Ember ZNet SDKCVEs relacionadas — silabs.com Ember ZNet SDK
No mesmo produto, das mais perigosas para as menos.
CVE-2023-51393MEDIUMPotential DoS due to BusFault and Assert in Ember ZNet legacy packet bufferEPSS 0.5%CVE-2023-51394MEDIUMPotential DoS for EFR32xxx parts in high traffic environments due to null buffer dereference / crashEPSS 0.5%CVE-2024-10106LOWEmber ZNet buffer overflow in 'packet handoff' pluginEPSS 0.4%CVE-2023-51392MEDIUMSilicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCMEPSS 0.2%CVE-2023-41096MEDIUMKeys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devicesEPSS 0.1%