CVE-2023-6533 MEDIUM

CVE-2023-6533: Silicon Labs PC Controller Denial of Service Vulnerability

Vendor Silabs.com
Product PC Controller
Weakness CWE-248
Published February 21, 2024
Last update September 27, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and earlier.

Key dates

02Disclosure timeline

February 21, 2024 CVE published
September 27, 2024 Record updated