Vulnerability · Published Jun 27, 2024 · Assigned by Silabs
CVE-2024-3043Zigbee co-ordinator realignment packet may lead to denial of service
High 7.5
In plain English
A high-severity security flaw in Ember ZNet SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 55.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their network identifier (pan ID), leading to a denial of service. This packet type is not useful in production and should be used only for PHY qualification.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | Ember ZNet SDK | 0 – before 8.0.0 |
Weakness: CWE-829 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://github.com/SiliconLabs/gecko_sdk product
- https://community.silabs.com/069Vm000005UCH0IAO vendor-advisory