PT-2020-16830 · Texas Instruments · Cc2538+1

Published 2020-10-27 · Updated 2020-11-10 · CVE-2020-27892

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Texas Instruments CC2538 devices with Z-Stack version 3.0.1

Description The issue arises from the improper processing of certain ZCL messages by the Zigbee protocol implementation. Specifically, it fails to handle a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message correctly, leading to a crash in the zclParseInDiscCmdsRspCmd() function.

Recommendations For Texas Instruments CC2538 devices with Z-Stack version 3.0.1, as a temporary workaround, consider disabling the zclParseInDiscCmdsRspCmd() function until a patch is available. Restrict access to ZCL Discover Commands to minimize the risk of exploitation. Avoid using the ZCL Discover Commands feature in the affected devices until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-27892

Affected Products

Cc2538

Z-Stack

References · 4

• https://osv.dev/vulnerability/CVE-2020-27892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27892 · Security Note
• https://ti.com/tool/Z-STACK · Vendor Advisory
• https://github.com/zigbeeprotocol/Z-Fuzzer/tree/master/vulnerabilities · Note