medium5.7
CVE-2023-5310
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier.
Impact
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silabs | Z-Wave Software Development Kit | through 7.20.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/SiliconLabs/gecko_sdk/releases
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1
- https://github.com/SiliconLabs/gecko_sdk/releases
- https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1