CVE-2024-6657 - Vulnerability Details - OpenCVE

A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://community.silabs.com/068Vm00000FfVNN

History

Mon, 04 Nov 2024 15:45:00 +0000

Type	Values Removed	Values Added
References	https://community.silabs.com/068Vm00000FPVg0

Mon, 04 Nov 2024 14:30:00 +0000

Type	Values Removed	Values Added
References		https://community.silabs.com/068Vm00000FfVNN

Wed, 30 Oct 2024 15:45:00 +0000

Type	Values Removed	Values Added
References	https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000E9IIbIAN?operationContext=S1

Wed, 30 Oct 2024 15:15:00 +0000

Type	Values Removed	Values Added
References		https://community.silabs.com/068Vm00000FPVg0

Fri, 11 Oct 2024 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 11 Oct 2024 14:00:00 +0000

Type	Values Removed	Values Added
Description		A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device.
Title		BLE peripheral DoS after few cycles of connect/disconnects
Weaknesses		CWE-821
References		https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000E9IIbIAN?operationContext=S1
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Silabs

Published: 2024-10-11T13:52:59.562Z

Updated: 2024-11-04T14:16:17.415Z

Reserved: 2024-07-10T14:18:38.454Z

Link: CVE-2024-6657

Vulnrichment

Updated: 2024-10-11T16:41:01.775Z

NVD

Status : Awaiting Analysis

Published: 2024-10-11T14:15:05.770

Modified: 2024-11-04T15:15:24.440

Link: CVE-2024-6657

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-6657", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "state": "PUBLISHED", "assignerShortName": "Silabs", "dateReserved": "2024-07-10T14:18:38.454Z", "datePublished": "2024-10-11T13:52:59.562Z", "dateUpdated": "2024-11-04T14:16:17.415Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "GSDK/SiSDK", "product": "EFR32 BLE SDK", "repo": "https://github.com/SiliconLabs/gecko_sdk", "vendor": "silabs.com", "versions": [{"lessThanOrEqual": "7.1.1", "status": "affected", "version": "7.1.0", "versionType": "semver"}, {"status": "affected", "version": "8.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A denial of service may be caused to a single peripheral device in a BLE network when multiple central \ndevices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device.<br>"}], "value": "A denial of service may be caused to a single peripheral device in a BLE network when multiple central \ndevices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device."}], "impacts": [{"capecId": "CAPEC-595", "descriptions": [{"lang": "en", "value": "CAPEC-595 Connection Reset"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-821", "description": "CWE-821 Incorrect Synchronization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2024-11-04T14:16:17.415Z"}, "references": [{"tags": ["permissions-required", "vendor-advisory"], "url": "https://community.silabs.com/068Vm00000FfVNN"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "To mitigate the issue, upgrade to: <br><ul><li><span style=\"background-color: var(--wht);\">EFR32 BLE SDK 7.1.2(GSDK 4.4.4) or later except BLE SDK 8.0.0(SiSDK 2024.6.0)</span></li><li>EFR32 BLE SDK 8.1.0 (SiSDK 2024.6.1) or later</li></ul>"}], "value": "To mitigate the issue, upgrade to:\u00a0\n * EFR32 BLE SDK 7.1.2(GSDK 4.4.4) or later except BLE SDK 8.0.0(SiSDK 2024.6.0)\n * EFR32 BLE SDK 8.1.0 (SiSDK 2024.6.1) or later"}], "source": {"discovery": "UNKNOWN"}, "title": "BLE peripheral DoS after few cycles of connect/disconnects", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-11T16:40:57.268096Z", "id": "CVE-2024-6657", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-11T16:41:06.836Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6657", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-11T16:40:57.268096Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-11T16:41:01.775Z"}}], "cna": {"title": "BLE peripheral DoS after few cycles of connect/disconnects", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-595", "descriptions": [{"lang": "en", "value": "CAPEC-595 Connection Reset"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/SiliconLabs/gecko_sdk", "vendor": "silabs.com", "product": "EFR32 BLE SDK", "versions": [{"status": "affected", "version": "7.1.0", "versionType": "semver", "lessThanOrEqual": "7.1.1"}, {"status": "affected", "version": "8.0.0", "versionType": "semver"}], "packageName": "GSDK/SiSDK", "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "To mitigate the issue, upgrade to:\u00a0\n * EFR32 BLE SDK 7.1.2(GSDK 4.4.4) or later except BLE SDK 8.0.0(SiSDK 2024.6.0)\n * EFR32 BLE SDK 8.1.0 (SiSDK 2024.6.1) or later", "supportingMedia": [{"type": "text/html", "value": "To mitigate the issue, upgrade to: <br><ul><li><span style=\"background-color: var(--wht);\">EFR32 BLE SDK 7.1.2(GSDK 4.4.4) or later except BLE SDK 8.0.0(SiSDK 2024.6.0)</span></li><li>EFR32 BLE SDK 8.1.0 (SiSDK 2024.6.1) or later</li></ul>", "base64": false}]}], "references": [{"url": "https://community.silabs.com/068Vm00000FfVNN", "tags": ["permissions-required", "vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A denial of service may be caused to a single peripheral device in a BLE network when multiple central \ndevices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device.", "supportingMedia": [{"type": "text/html", "value": "A denial of service may be caused to a single peripheral device in a BLE network when multiple central \ndevices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-821", "description": "CWE-821 Incorrect Synchronization"}]}], "providerMetadata": {"orgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "shortName": "Silabs", "dateUpdated": "2024-11-04T14:16:17.415Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6657", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:16:17.415Z", "dateReserved": "2024-07-10T14:18:38.454Z", "assignerOrgId": "030b2754-1501-44a4-bef8-48be86a33bf4", "datePublished": "2024-10-11T13:52:59.562Z", "assignerShortName": "Silabs"}, "dataVersion": "5.1"}