« Volver al listado

CVE-2024-6350

Estado: AplazadaMedia (6.5)—

A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the error condition automatically.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-6350",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-6350",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-08T17:27:11.277103Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "product-security@silabs.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@silabs.com",
      "affectedData": [
        {
          "repo": "https://github.com/SiliconLabs/simplicity_sdk",
          "vendor": "silabs.com",
          "product": "Simplicity SDK",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2024.12.0",
              "versionType": "semver"
            }
          ],
          "packageName": "SiSDK",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-01-08T18:15:19.880",
  "references": [
    {
      "url": "https://community.silabs.com/069Vm00000HtvDgIAJ",
      "source": "product-security@silabs.com"
    },
    {
      "url": "https://github.com/SiliconLabs/simplicity_sdk/releases",
      "source": "product-security@silabs.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "product-security@silabs.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog reset clears the error condition automatically."
    },
    {
      "lang": "es",
      "value": "Un paquete 802.15.4 mal formado provoca un desbordamiento del búfer que da lugar a una confirmación y una denegación de servicio. Un restablecimiento del sistema de vigilancia elimina la condición de error automáticamente."
    }
  ],
  "lastModified": "2026-06-17T08:17:49.933",
  "sourceIdentifier": "product-security@silabs.com"
}