Vulnerability · Published Oct 11, 2024 · Assigned by Silabs
CVE-2024-6657BLE peripheral DoS after few cycles of connect/disconnects
Medium 6.5
In plain English
A medium-severity security flaw in EFR32 BLE SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 90.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | EFR32 BLE SDK | 7.1.0 – through 7.1.18.0.0 |
Weakness: CWE-821 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://community.silabs.com/068Vm00000FfVNN permissions-required, vendor-advisory