CVE-2024-3052 - Vulnerability Details - OpenCVE

Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Silabs	Z\/ip Gateway Sdk

No data.

No data.

References

Link	Providers
https://community.silabs.com/068Vm0000045w2j

History

Wed, 05 Feb 2025 22:15:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 27 Sep 2024 17:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-754

Fri, 27 Sep 2024 17:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Silabs Silabs z\/ip Gateway Sdk
CPEs		cpe:2.3:a:silabs:z\/ip_gateway_sdk:-:::::::*
Vendors & Products		Silabs Silabs z\/ip Gateway Sdk
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 27 Sep 2024 16:30:00 +0000

Type	Values Removed	Values Added
Description	Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.	Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.
Weaknesses		CWE-248

MITRE

Status: PUBLISHED

Assigner: Silabs

Published: 2024-04-26T21:27:16.422Z

Updated: 2025-02-05T21:25:23.134Z

Reserved: 2024-03-28T19:05:04.219Z

Link: CVE-2024-3052

Vulnrichment

Updated: 2024-08-01T19:32:42.571Z

NVD

Status : Awaiting Analysis

Published: 2024-04-26T22:15:08.460

Modified: 2025-02-05T22:15:29.877

Link: CVE-2024-3052

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-3052", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "state": "PUBLISHED", "assignerShortName": "Silabs", "dateReserved": "2024-03-28T19:05:04.219Z", "datePublished": "2024-04-26T21:27:16.422Z", "dateUpdated": "2025-02-05T21:25:23.134Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "Z/IP Gateway SDK", "product": "Z/IP Gateway SDK", "repo": "https://github.com/SiliconLabs/gecko_sdk/releases", "vendor": "silabs.com", "versions": [{"lessThan": "7.14.00", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.</span>"}], "value": "Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway."}], "impacts": [{"capecId": "CAPEC-601", "descriptions": [{"lang": "en", "value": "CAPEC-601 Jamming"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-248", "description": "CWE-248 Uncaught Exception", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2024-09-27T16:13:04.990Z"}, "references": [{"tags": ["permissions-required"], "url": "https://community.silabs.com/068Vm0000045w2j"}], "source": {"discovery": "UNKNOWN"}, "title": "Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-248", "lang": "en", "description": "CWE-248 Uncaught Exception"}]}], "affected": [{"vendor": "silabs", "product": "z\\/ip_gateway_sdk", "cpes": ["cpe:2.3:a:silabs:z\\/ip_gateway_sdk:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "7.14.00", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-02-05T21:24:21.239587Z", "id": "CVE-2024-3052", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-05T21:25:23.134Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:32:42.571Z"}, "title": "CVE Program Container", "references": [{"tags": ["permissions-required", "x_transferred"], "url": "https://community.silabs.com/068Vm0000045w2j"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://community.silabs.com/068Vm0000045w2j", "tags": ["permissions-required", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:32:42.571Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-3052", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-05T21:24:21.239587Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:silabs:z\\/ip_gateway_sdk:-:*:*:*:*:*:*:*"], "vendor": "silabs", "product": "z\\/ip_gateway_sdk", "versions": [{"status": "affected", "version": "0", "lessThan": "7.14.00", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-248", "description": "CWE-248 Uncaught Exception"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-29T15:11:32.769Z"}}], "cna": {"title": "Z/IP Gateway S2 Nonce Get Denial of Service Vulnerability", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-601", "descriptions": [{"lang": "en", "value": "CAPEC-601 Jamming"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/SiliconLabs/gecko_sdk/releases", "vendor": "silabs.com", "product": "Z/IP Gateway SDK", "versions": [{"status": "affected", "version": "0", "lessThan": "7.14.00", "versionType": "semver"}], "packageName": "Z/IP Gateway SDK", "defaultStatus": "unaffected"}], "references": [{"url": "https://community.silabs.com/068Vm0000045w2j", "tags": ["permissions-required"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-248", "description": "CWE-248 Uncaught Exception"}]}], "providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2024-09-27T16:13:04.990Z"}}}, "cveMetadata": {"cveId": "CVE-2024-3052", "state": "PUBLISHED", "dateUpdated": "2025-02-05T21:25:23.134Z", "dateReserved": "2024-03-28T19:05:04.219Z", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "datePublished": "2024-04-26T21:27:16.422Z", "assignerShortName": "Silabs"}, "dataVersion": "5.1"}