Vulnerability · Published Dec 15, 2023 · Assigned by Silabs
CVE-2023-5310Z-Wave Denial of Service caused by Stream of Packets
Medium 5.7
In plain English
A medium-severity security flaw in Gecko SDK from silabs.com. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)0.3%top 71.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| silabs.com | Gecko SDK | 0 – through 7.20.3 |
Weakness: CWE-248 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H