IM
IronMonkey Threat Research

CVE-2024-6351 MEDIUM

Published: 2025-01-28 | Last Modified: 2026-04-15 | Status: Deferred

Description

A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert

Additional Descriptions (1)

Un paquete malformado puede provocar un desbordamiento de búfer en la capa NWK/APS de la pila Ember ZNet y generar una aserción.

CVSS Metrics

Base Score: 4.3 (MEDIUM)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack VectorADJACENT_NETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactLOW

Source: [email protected]

Type: Secondary

Exploitability Score: 2.8

Impact Score: 1.4

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-120
Notification
Message here