Silicon Labs Zigbee SDK Out-of-bounds Write Vulns (CVE-2024-88575/88576) Analysis & Fix

Vulnerability Overview Vulnerability Name: Silicon Labs Security Advisory A-00000589: Zigbee Out-of-bounds Write Vulnerabilities Vulnerability Type: Out-of-bounds Write Vulnerability Affected Products: Ember SDK 9.1.1 and earlier versions SDK 9.3.2 and earlier versions Affected Versions: Ember SDK 2024.4 and earlier versions All released versions of the SDK CVE Numbers: CVE-2024-88576 CVE-2024-88575 Description: Two out-of-bounds write vulnerabilities have been identified in the affected EmberZNet SDK versions. Out-of-bounds writes may lead to remote code execution (RCE), depending on the attacker's level of control over the target device. Attackers can exploit these vulnerabilities to compromise the network. For CVE-2024-88576, the affected Zigbee cluster does not support the command from server to client. For CVE-2024-88575, there is no client request. The vulnerability exists in Simple_Zigbee, allowing an attacker to remotely exploit this vulnerability against Simple_Zigbee devices. Scope of Impact Products: Ember SDK, SDK Versions: - Ember SDK 9.1.1 and earlier versions - SDK 9.3.2 and earlier versions - Ember SDK 2024.4 and earlier versions - All released versions of the SDK Remediation Recommended Actions: - Enable the "Platform + Security + Memory Protection Using + Simple-MP" component, which is configured by default to disable MP at startup to prevent out-of-bounds write attacks. - For affected Ember SDK versions, this component is not included by default. - For SDK 9.3.2 and earlier versions, this component is enabled by default. - For instructions on enabling and configuring the component, refer to the Simplicity Studio User Guide. Fixed Versions: - SDK 2024.6.2 and later versions POC Code or Exploit Code No specific POC code or exploit code is included in the page. Additional Resources Security Policy: https://www.silabs.com/security Technical Support: https://www.silabs.com/support Revision History Revision Date: 2024-07-12 Description: Initial release

Goal Reached Thanks to every supporter — we hit 100%!

Silicon Labs Zigbee SDK Out-of-bounds Write Vulns (CVE-2024-88575/88576) Analysis & Fix

More from this source