{"id":"CVE-2024-3051","state":"PUBLISHED","title":"Z/IP Gateway Device Reset Locally Denial of Service Vulnerability","description":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.","publishedAt":"2024-04-26T21:26:38.377Z","updatedAt":"2024-09-27T16:09:38.663Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"Silabs"},"assigner":"Silabs","products":["silabs.com Z/IP Gateway SDK"],"affected":[{"vendor":"silabs.com","product":"Z/IP Gateway SDK","packageName":"Gecko SDK","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"7.18.03","versionType":"semver"}],"repo":"https://github.com/SiliconLabs/gecko_sdk/releases"}],"references":["https://community.silabs.com/068Vm0000045w2j"],"weaknesses":["CWE-248","CWE-419"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/3xxx/CVE-2024-3051.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-3051","state":"PUBLISHED","datePublished":"2024-04-26T21:26:38.377Z","dateUpdated":"2024-09-27T16:09:38.663Z","assignerShortName":"Silabs","assignerOrgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateReserved":"2024-03-28T19:04:58.593Z"},"containers":{"cna":{"title":"Z/IP Gateway Device Reset Locally Denial of Service Vulnerability","descriptions":[{"lang":"en","value":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time."}],"affected":[{"vendor":"silabs.com","product":"Z/IP Gateway SDK","packageName":"Gecko SDK","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"7.18.03","versionType":"semver"}],"repo":"https://github.com/SiliconLabs/gecko_sdk/releases"}],"references":[{"url":"https://community.silabs.com/068Vm0000045w2j","tags":["permissions-required"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-248","description":"CWE-248 Uncaught Exception","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-419","description":"CWE-419 Unprotected Primary Channel","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Silabs","orgId":"030b2754-1501-44a4-bef8-48be86a33bf4","dateUpdated":"2024-09-27T16:09:38.663Z"},"impacts":[{"capecId":"CAPEC-601","descriptions":[{"lang":"en","value":"CAPEC-601 Jamming"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"silabs","product":"z\\/ip_gateway_sdk","defaultStatus":"unknown","versions":[{"version":"-","status":"affected"}],"cpes":["cpe:2.3:a:silabs:z\\/ip_gateway_sdk:-:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-3051","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-29T16:34:09.684748Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:31:05.004Z"}},{"title":"CVE Program Container","references":[{"url":"https://community.silabs.com/068Vm0000045w2j","tags":["permissions-required","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T19:32:42.626Z"}}]}}}