silabs.com PC Controller up to 5.54.0 S2 Nonce Get Command Class Packet unusual condition

Summaryinfo

A vulnerability labeled as critical has been found in silabs.com PC Controller up to 5.54.0. This affects an unknown function of the component S2 Nonce Get Command Class Packet Handler. The manipulation results in unusual condition. This vulnerability is known as CVE-2023-6640. Access to the local network is required for this attack. No exploit is available.

Detailsinfo

A vulnerability, which was classified as critical, was found in silabs.com PC Controller up to 5.54.0. Affected is an unknown part of the component S2 Nonce Get Command Class Packet Handler. The manipulation with an unknown input leads to a unusual condition vulnerability. CWE is classifying the issue as CWE-754. The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product. This is going to have an impact on availability. CVE summarizes:

Malformed S2 Nonce Get Command Class packets can be sent to crash PC Controller v5.54.0 and earlier. 

The weakness was published 02/21/2024. The advisory is shared for download at community.silabs.com. This vulnerability is traded as CVE-2023-6640 since 12/08/2023. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• silabs.com

Name

• PC Controller

Version

• 5.0
• 5.1
• 5.2
• 5.3
• 5.4
• 5.5
• 5.6
• 5.7
• 5.8
• 5.9
• 5.10
• 5.11
• 5.12
• 5.13
• 5.14
• 5.15
• 5.16
• 5.17
• 5.18
• 5.19
• 5.20
• 5.21
• 5.22
• 5.23
• 5.24
• 5.25
• 5.26
• 5.27
• 5.28
• 5.29
• 5.30
• 5.31
• 5.32
• 5.33
• 5.34
• 5.35
• 5.36
• 5.37
• 5.38
• 5.39
• 5.40
• 5.41
• 5.42
• 5.43
• 5.44
• 5.45
• 5.46
• 5.47
• 5.48
• 5.49
• 5.50
• 5.51
• 5.52
• 5.53
• 5.54.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion