{"id":"CVE-2024-3051","aliases":["EUVD-2024-31658","GHSA-cp7v-2p64-673r"],"status":"published","title":"Z/IP Gateway Device Reset Locally Denial of Service Vulnerability","description":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00476,"percentile":0.41586,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-248","CWE-345","CWE-419"],"published":"2024-04-26T21:26:38Z","modified":"2026-06-17T07:43:12Z","products":[{"vendor":"silabs","product":"z\\/ip_gateway_sdk"},{"vendor":"silabs.com","product":"z/ip gateway sdk"}],"references":[{"url":"https://community.silabs.com/068Vm0000045w2j","tags":["permissions-required","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3051"},{"url":"https://github.com/advisories/GHSA-cp7v-2p64-673r"}],"sources":{"cve":[{"id":"CVE-2024-3051","title":"Z/IP Gateway Device Reset Locally Denial of Service Vulnerability","description":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.","status":"published","published":"2024-04-26T21:26:38.377Z","modified":"2024-09-27T16:09:38.663Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-248","CWE-419"],"updated_at":"2026-11-02T14:34:10.961618Z"}],"euvd":[{"id":"EUVD-2024-31658","description":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.","status":"published","published":"2024-04-26T21:26:38Z","modified":"2024-09-27T16:09:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:05.828156Z"}],"ghsa":[{"id":"GHSA-cp7v-2p64-673r","title":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end...","description":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time. ","status":"published","published":"2024-04-27T00:30:37Z","modified":"2024-09-27T18:33:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-248","CWE-345"],"updated_at":"2026-11-02T14:58:21.889894Z"}],"nvd":[{"id":"CVE-2024-3051","description":"Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway during this time.","status":"published","published":"2024-04-26T22:15:08.263Z","modified":"2026-06-17T07:43:12.69Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-248","CWE-419"],"updated_at":"2026-11-02T14:09:55.124919Z"}]}}