CVE-2024-3052 Malformed S2 Nonce Get command classes can be sent to crash the gateway

Description

Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.

Affected products and versions

Product	Affected versions	Fixed in
Z/IP Gateway SDK 7.14	earliest → < 7.14.00	7.14.00

Other CVEs of Z/IP Gateway SDK

The 3 CVEs of Z/IP Gateway SDK →

CVE-2024-3051 Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device 7.5 High CVE-2023-4489 The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP… 6.4 Medium