CVE-2023-6533

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and earlier.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://community.silabs.com/068Vm000001HdNm	Permissions Required
https://community.silabs.com/068Vm000001HdNm	Permissions Required

Configurations

Configuration 1 (hide)

cpe:2.3:a:silabs:z-wave_pc-based_controller:*:*:*:*:*:*:*:*

History

12 Feb 2025, 16:57

Type	Values Removed	Values Added
References	~~() https://community.silabs.com/068Vm000001HdNm -~~	() https://community.silabs.com/068Vm000001HdNm - Permissions Required
CWE		NVD-CWE-noinfo
First Time		Silabs Silabs z-wave Pc-based Controller
CPE		cpe:2.3:a:silabs:z-wave_pc-based_controller::::::::

Information

Published : 2024-02-21 20:15

Updated : 2025-02-12 16:57

NVD link : CVE-2023-6533

Mitre link : CVE-2023-6533

CVE.ORG link : CVE-2023-6533

JSON object : View

Products Affected

silabs

z-wave_pc-based_controller

CWE

CWE-248

Uncaught Exception

CWE-419

Unprotected Primary Channel

NVD-CWE-noinfo

{"id": "CVE-2023-6533", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "product-security@silabs.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-02-21T20:15:46.283", "references": [{"url": "https://community.silabs.com/068Vm000001HdNm", "tags": ["Permissions Required"], "source": "product-security@silabs.com"}, {"url": "https://community.silabs.com/068Vm000001HdNm", "tags": ["Permissions Required"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "product-security@silabs.com", "description": [{"lang": "en", "value": "CWE-248"}, {"lang": "en", "value": "CWE-419"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and earlier."}, {"lang": "es", "value": "Se pueden enviar paquetes de clase de comando de reinicio local de dispositivo con formato incorrecto al controlador, lo que hace que el controlador asuma que el dispositivo final ha abandonado la red. Despu\u00e9s de esto, el controlador no reconocer\u00e1 las tramas enviadas por el dispositivo final. Esta vulnerabilidad existe en PC Controller v5.54.0 y versiones anteriores."}], "lastModified": "2025-02-12T16:57:31.787", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:silabs:z-wave_pc-based_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ACB7BA3-6720-44E9-A822-F4673C4B81A9", "versionEndIncluding": "5.54"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@silabs.com"}