CVE-2024-3051
Assigner: Silabs
Published: 2024-04-26T21:26:38.377Z
State: PUBLISHED
affected: defaultStatus: affected
packageName: Gecko SDK
product: Z/IP Gateway SDK
repo: https://github.com/SiliconLabs/gecko_sdk/releases
vendor: silabs.com
versions: lessThanOrEqual: 7.18.03
status: affected
version: 0
versionType: semver
descriptions: supportingMedia: base64: no
type: text/html
value: Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.&nbsp;
value: Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time. 
impacts: capecId: CAPEC-601
descriptions: value: CAPEC-601 Jamming
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-754
description: CWE-754 Improper Check for Unusual or Exceptional Conditions
type: CWE
descriptions: cweId: CWE-345
description: CWE-345 Insufficient Verification of Data Authenticity
type: CWE
source: discovery: UNKNOWN
title: Z/IP Gateway Device Reset Locally Denial of Service Vulnerability
x_generator: engine: Vulnogram 0.1.0-dev