CVE-2023-6533CWE-248CWE-419

Silicon Labs PC Controller Denial of Service Vulnerability

Medium · published February 21, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and earlier.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.5th percentile
Weaknesses
CWE-248 · Uncaught Exception; CWE-419 · Unprotected Primary Channel
Published
2024-02-21T19:55Z
EPSS history
Timeline
  • 21 FEB 19:55Z
    Silicon Labs PC Controller Denial of Service Vulnerability
    cvelistv5