Skip to content
Sign in
7.5 High

CVE-2024-3051 Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device

Description

Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.

Affected products and versions

Product Affected versions Fixed in
Z/IP Gateway SDK 7.18 earliest → 7.18.03 No fix stated
z\/ip_gateway_sdk Versions not published

Other CVEs of Z/IP Gateway SDK

The 3 CVEs of Z/IP Gateway SDK →
CVE-2024-3052 Malformed S2 Nonce Get command classes can be sent to crash the gateway 7.5 High CVE-2023-4489 The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP… 6.4 Medium
Track this CVE