Source |
CVE Liste |
Identifiant |
8330978 |
Date de publication |
2023-04-25 14:15:09 (vue: 2023-04-25 17:07:46) |
Titre |
CVE-2023-29779 |
Texte |
Sengled Dimmer Switch V0.0.9 contient une vulnérabilité de déni de service (DOS), qui permet à un attaquant distant d'envoyer des messages en zigbee malveillants à un appareil vulnérable et de provoquer des collisions.Après avoir reçu la commande malveillante, l'appareil continuera de signaler son état et enfin drainer sa batterie après avoir reçu la commande \\ 'set_short_poll_interval \'.
Sengled Dimmer Switch V0.0.9 contains a denial of service (DOS) vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery after receiving the \'Set_short_poll_interval\' command. |
Notes |
|
Envoyé |
Oui |
Condensat |
2023 29779 after allows attacker battery cause command contains crashes cve denial device dimmer dos drain finally interval its keep malicious messages poll receiving remote reporting send sengled service set short status switch vulnerability vulnerable which will zigbee |
Tags |
|
Stories |
|
Move |
|