What’s Vulnerable › Vulnerabilities

CVE-2023-5310: Z-Wave Denial of Service caused by Stream of Packets

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-15 · updated 2026-06-17
• Weakness: CWE-248

Description

A denial of service vulnerability exists in all Silicon Labs Z-Wave controller and endpoint devices running Z-Wave SDK v7.20.3 (Gecko SDK v4.3.3) and earlier. This attack can be carried out only by devices on the network sending a stream of packets to the device.

Affected products

• Silabs Z-Wave Software Development Kit: through 7.20.2.0

References

• https://github.com/SiliconLabs/gecko_sdk/releases
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1
• https://github.com/SiliconLabs/gecko_sdk/releases
• https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000005E7EIAU?%20operationContext=S1

Get alerted when CVE-2023-5310 or the next vulnerability affects your stack