CVE-2023-6640 MEDIUM

CVE-2023-6640: Silicon Labs PC Controller v5.54.0 and Earlier Denial of Service Vulnerability

Vendor Silabs.com
Product PC Controller
Weakness CWE-248
Published February 21, 2024
Last update September 27, 2024
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Malformed S2 Nonce Get Command Class packets can be sent to crash PC Controller v5.54.0 and earlier.

Key dates

02Disclosure timeline

February 21, 2024 CVE published
September 27, 2024 Record updated