CVE-2023-2683

MEDIUM

Connection update while closing connection may lead to denial-of-service

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-2683 has a selected CVSS score of 5.3 (medium).

Description

A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 11, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Bluetooth SDK

Browse silabs.com / Bluetooth SDK

Default status: unaffected

CVE List5.0.0 to ≤ v5.1.1affected

References

3