VulnerabilityAnalyzed
CVE-2023-6533
This vulnerability exists in PC Controller v5.54.0, and earlier.
MEDIUM 6.5EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and earlier.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.25% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-248, CWE-419
- Affected
- silabs/z-wave pc-based controller
- Source
- product-security@silabs.com
References
- https://community.silabs.com/068Vm000001HdNmPermissions Required
- https://community.silabs.com/068Vm000001HdNmPermissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.