PT-2024-15040 · Unknown · Pc Controller

Published 2024-02-21 · Updated 2024-09-27 · CVE-2023-6640

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PC Controller versions 5.54.0 and earlier

Description The issue allows malformed S2 Nonce Get Command Class packets to be sent, which can cause the PC Controller to crash.

Recommendations For versions 5.54.0 and earlier, consider disabling the handling of S2 Nonce Get Command Class packets as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-248

Related Identifiers

CVE-2023-6640

Affected Products

Pc Controller

References · 6

• https://community.silabs.com/068Vm000001HdNm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6640 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6640 · Vendor Advisory
• https://twitter.com/CVEnew/status/1760397912113127581 · Twitter Post
• https://t.me/cvenotify/72125 · Telegram Post
• https://t.me/cvenotify/96369 · Telegram Post