7.5
High
CVE-2024-3043 An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their…
Description
An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their network identifier (pan ID), leading to a denial of service. This packet type is not useful in production and should be used only for PHY qualification.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ember ZNet SDK 8.0 | earliest → < 8.0.0 | 8.0.0 |
| emberznet_sdk 8.0 | earliest → < 8.0.0 | 8.0.0 |
Other CVEs of Ember ZNet SDK
The 6 CVEs of Ember ZNet SDK →
CVE-2024-10106
A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's…
3.7
Low
CVE-2023-51393
Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon…
5.3
Medium
CVE-2023-51394
High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before…
5.3
Medium
CVE-2023-51392
Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators,…
6.2
Medium