CVE-2023-6533

Silicon Labs PC Controller Denial of Service Vulnerability

State: Published
Severity: 6.5 Medium
Published: Feb 21, 2024
Updated: Sep 27, 2024
Reserved: Dec 5, 2023

Description

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and earlier.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Silabs

Weaknesses

CWE-248 Uncaught Exception
CWE-419 Unprotected Primary Channel

Affected Products

Product	Versions
PC Controllersilabs.com	5.54.0 and earlierAffected

References

https://community.silabs.com/068Vm000001HdNmvendor-advisorypermissions-required

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.