CVE-2024-3051

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-248CWE-419

Affected software

VendorProductVersions
silabs.comZ/IP Gateway SDK<= 7.18.03
silabsz\/ip_gateway_sdk-

References

Timeline

Published
Apr 26, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-305109.8Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking CVE-2024-305115.3Insertion of Sensitive Information into Log File vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce.This issue affects FG PrestaSCVE-2024-305129.1Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.20.CVE-2024-305136.5Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.CVE-2024-305145.3Insertion of Sensitive Information into Log File vulnerability in Paid Memberships Pro Paid Memberships Pro – Payfast Gateway Add On.This isCVE-2024-305158.8Missing Authorization vulnerability in Pixelite Events Manager.This issue affects Events Manager: from n/a through 6.4.6.4.CVE-2024-305167.5Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly CVE-2024-305178.8Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.CVE-2024-305184.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommCVE-2024-305195.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lordicon Lordicon Animated Icons allowCVE-2024-30527.5Malformed S2 Nonce Get command classes can be sent to crash the gateway. A hard reset is required to recover the gateway.CVE-2024-305205.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Labib Ahmed Carousel Anything For WPBa
CVE-2024-3051: High severity, CVSS 7.5 | Vulnix